We can change the log PREVIOUSLY of being parsed in filebeat.
Out original logs are not in JSON and we've a script that converts it to JSON, is not a problem for us change all the JSON lines
My question is... when filebeat understand that @timestamp is GMT+1? What changes we must made in the JSON line to set the timezone to GMT+1 (or other)
I read this https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-date-format.html#custom-date-formats
But changing is not working (adding +0100)
{"@timestamp":"2018-01-21T23:50:18.000Z+0100","EMP":"ARA","INST":"PRI","TIPO":"T2","MSG":"*** FPS COV: [PCW](E 1466196 2001) -> 2018/01/21 23:50:04.310 Est:255 Cal:1 *** ","MOD":"AbdFPS","FNT":"fpsDD.c","LIN":47,"ID1":0,"ID2":0,"ID3":0,"STR1":"","STR2":"","STR3":""}
I know, Im a newbie 