Skip to content

Normalize timestamp time zones #4569

Closed
Closed
@andrewkroh

Description

@andrewkroh

Index names that contain dates may be incorrect when the system timezone is not in UTC. The index name (<beatname>-%{+yyyy.MM.dd}) is generated based on the internal @timestamp value. The date formatter that converts the %{+yyyy.MM.dd} into a date doesn't do any conversion to UTC.

Some Beats may normalize their timestamps to UTC before publishing events and they will not be affected by this bug.

For confirmed bugs, please report:

  • Version: 5.x, 6.0
  • Operating System: all
  • Steps to Reproduce: Use Beats on a system where the timezone is not configured to UTC.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions