Elasticsearch : 6.7.2
MongoDB : 3.2.11
Graylog : 3.0.2-1
I need some help for edit a timestamp on some servers.
I have a few servers with TZ = UTC and I want to display them into the console with a TZ = UTC +2 but just on these servers.
I tried to used an extractor for copy the timestamp and modify in other TZ but that didn’t works.
So, I tried to did it with a pipeline.
I have configured the following steps :
- I create a dedicated input.
- I create a dedicated stream.
- I have this rule for replace the timestamp :
let new_date = parse_date(substring(to_string(now("+0100")),0,23), “yyyy-MM-dd’T’HH:mm:ss.SSS”);
But, it doesn’t works.
I miss something ?
Thank you for your replies.