How to alter a field without using a pipeline

The timestamp field of our IIS logs is in UTC. I want it in local. Is there a way to change it in graylog without using a Pipeline? I can’t use a Pipeline.

Check extractor with date converter:
https://docs.graylog.org/en/4.0/pages/extractors.html#the-standard-date-converter

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.