Pipelines now function not working

[Steveliu]

rule “set timestamp”
when
true
then
let new_date = now(“ASIA_HONGKONG”);
set_field(“Datetime”, new_date);
end

Hi I try to add in current datetime in a new field, but the timezone value is not work, it only slow UTC datetime, pls help.

[Steveliu]

[jochen]

“ASIA_HONGKONG” is not a valid timezone identifier. See http://joda-time.sourceforge.net/timezones.html for a list of valid timezones.

[Steveliu]

Hi Jo,

I try “Asia/Hong_Kong”, but seem not work, pls help.

Thank You.

Br,
Steve

[jochen]

It’s all working as expected.

Please be aware that all date fields except “timestamp” are displayed with timezone “UTC” (see trailing “Z” in the “Datetime” field).

Also see:

Graylog2 shows different timestamp

[Steveliu]

But when I export all logging to CVS, the timestamp is show in UTC? is there any way to fix this?

[jochen]

@Steveliu

is there any way to fix this?

No, it will always be an ISO 8601 timestamp with timezone UTC.