hey david,
i got it to work by using the tostring method,
POST filebeat-6.0.0-2018.12.18/_update_by_query
{
"query": {
"match_all": {}
},
"script": {
"source": "ctx._source['@timestamp'] = OffsetDateTime.parse(ctx._source['@timestamp']).plusYears(1).toString()"
}
}