Syslog pipeline timezone change

[ben-sec]

Hi!

I try to change the timezone for my Syslog pipeline like this

and the pipeline stops to work. Why? Isn't the syntax correct? Thanks in advance!

Cheers, Ben

[cm-ops]

Setting looks correct, do you get an error in the log?

[ben-sec]

So far I couldn't find anything. It should be in elasticsearch.log, shouldn't it? Master or search nodes?

[cm-ops]

Check on the search node. Also, check the syslog pipeline stats - sudo so-elasticsearch-pipeline-stats syslog for any errors.

[ben-sec]

I will park this problem, since we plan to switch to SO 2.4 shortly and then we will no longer use UTC in SO. Thank you anyway!