I'm very new to the ELK stack.
I have several logs that starts collecting data before the systems time is set. The result is I have several hundred log entries with in accurate time stamps.
Is there a way I can edit the incorrect timestamps in logstash based on the 1st correct entry in the log? Or is there a way to edit them after they have been entered into Elasticsearch?