Oh, sorry for the mistake on the configuration, you are right
Can you check if the pipeline is making use of event.timezone
? You may need to reinstall the pipeline if you changed the value of var.convert_timezone
. Take a look to this topic for a similar issue with other module.