<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">That certainly sounds obvious, however,
I can't get it to work. The documented options for the "7.2.4.
Elasticsearch destination options" does NOT include a time-zone
option.<br>
<br>
<br>
My java destination is devined as:<br>
<br>
destination d_elasticsearch_1 {<br>
java(<br>
class-path("/usr/local/lib64/syslog-ng/java-modules/*.jar:/usr/share/elasticsearch/lib/*.jar")<br>
class-name("org.syslog_ng.elasticsearch.ElasticSearchDestination")<br>
<br>
option("index",
"flare-${YEAR}.${MONTH}.${DAY}.${HOUR}")<br>
option("type", "test")<br>
option("client-mode", "node")<br>
option("resource",
"/etc/elasticsearch/elasticsearch.yml")<br>
option("log-fifo-size","75000")<br>
option("time-zone","UTC")<br>
option("cluster", "uvic-cluster-01")<br>
option("message-template", "$MESSAGE")<br>
option("flush-limit", "50")<br>
);<br>
<br>
};<br>
<br>
<br>
<br>
But my index uses the hour from the local timezone, not the UTC
time zone.<br>
<br>
Is the order of the options important?<br>
<br>
Does the elasticsearch destination fail apply the time zone to the
index?<br>
<br>
This is beginning to look like a bug.<br>
<br>
Evan.<br>
<br>
<br>
On 09/28/2015 10:04 PM, Fabien Wernli wrote:<br>
</div>
<blockquote cite="mid:53DB1C25-4A78-40AF-BC38-871CB05E2705@in2p3.fr"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
Hi Evan,<br>
<br>
Just use the `time-zone` option in the `java` block.<br>
<br>
Cheers
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.balabit.com/wiki/syslog-ng-faq">http://www.balabit.com/wiki/syslog-ng-faq</a>
</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="500">--
Evan Rempel <a class="moz-txt-link-abbreviated" href="mailto:erempel@uvic.ca">erempel@uvic.ca</a>
Senior Systems Administrator 250.721.7691
Data Centre Services, University Systems, University of Victoria
</pre>
</body>
</html>