Hi everyone,
I store syslog into elasticsearch and overview data on Kibana.
I found that the date of @timestamp and _index doesn't match.
The _index is default logstash-* and it seems would automatically adjust from @timestamp.
my doubt is that whether the _index is using UTC, and how to solve it.
this one looks doesn't match:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.