I have the problem that the time does not match the one in the log file.
What can I do about it ?
It only occurs with this log file (filebeat). On another system, where Logstash is running, this does not occur.
Unfortunately there is no Exim module for Logstash.
Can someone help me ?
I suppose it is a problem with timezone.
your local datetime may be
but if imported to es without its timezone something like "2022-07-21 10:11:22",
it could be regarded as "2022-07-21 10:11:22Z" equals to "2022-07-21 12:11:22+02:00", which could be displayed as "2022-07-21 12:11:22" in kibana.
Try date filter plugin with timezone.
Elastic converts incoming time to UTC
Kibana converts it back to your local time.
check in kibana and this event should show up at 2022-07-21 10:11:22
Where do I check this and where do I set the time zone correctly ? On the server where ELK runs and where exim runs, the correct time zone is active.