Make the ISO-8601 Time output configurable (timezone specific instead of always Zulu)

[untergeek]

Migrated from: https://logstash.jira.com/browse/LOGSTASH-520
Migrated from: https://logstash.jira.com/browse/LOGSTASH-2243

The desire expressed in these tickets is that a timezone other than Zulu/UTC be able to be output from the date filter. Not every output goes to Elasticsearch or uses UTC.

[wiibaa]

sprintf additional behaviour also described in elastic/logstash#2315

[weiweiwang]

I'm a Chinese developer, our timezone is +08:00，the problem using logstash is that @timestamp is always formatted as @timestamp" => "2015-07-25T16:00:30.000Z, the input time is 2015-07-26 00:00:30. This problem will cause 1 day log to be spliced to two indexes:logstash-2015.07.25 and logstash-2015-07.26

I tried to fix it by add logged_date field to represent 2015-07-26 in +08:00 timezone, however, in kibana, all the date fields will be added 08:00 hours, which causes incorrect logged_date in Chinese timezone

Could anyone give me a solution on this problem? I googled around and found no proper solution.

[hakman]

@weiweiwang you might want to take a look at the timezone option.

If you want to ask more questions, I suggest using https://discuss.elastic.co/c/logstash.

[weiweiwang]

thanks @hakman, I will put this problem to https://discuss.elastic.co/c/logstash

[mvernimmen-CG]

Having an option to specify the timezone for output would be great. Currently any file we write out of logstash which uses timestamp, writes it in UTC. This is not what we want.
So +1 for getting this feature added :)

[imweijh]

+1

[trondvh]

+1

[mr2qin]

+1

[leo100]

+1

[foxracle]

+1
this kind of output is very useful for file output like this:
output {
file {
path => "/test/%{+YYYY-MM-dd}.log"
}
}