Time in IST for log-rotation - Logstash

Elastic Stack Logstash
2

HI

If what you want is to name your files using the date and time in your local time, you might try something like this:

filter {
  [... your stuff goes here...]
  ruby {
    code => "
      event.set('filename', event.get('@timestamp').time.localtime.strftime('%Y-%m-%d/%H'))
    "
  }
}
	
output {
  file {
    path => "/log/sync/ims-v1/%{filename}-ims.log"
  }
}

Haven't tried this code but I use a similar construct to generate local time from timestamp (or from any date field).

Hope this helps.