I have 2 elastic search clusters serving 4 environment. 2 environments are hosted in PST and 2 environments are hosted in Sydney AU time zone.
3 of the environment are pointed to first cluster and 1 to a different cluster.
Somehow the environment that goes to the second cluster is having issues with showing the messages in kibana in the correct time.
The logstash configuration is exactly the same and went over kibana settings and could not locate a problem.
If you can, Please let me know what is wrong in my setup, thank you