Hi,
With the time change, my logs are shifted by one hour (logs from an HEC input) :
It is the same case on many logs from several sources.
Like logs from Azure add-on (the props is correctly set with a TIME_PREFIX on the field Horodate) :
And same case from other add-on...
How can I fix this ?
Thank you!
What is the TIME_FORMAT setting in props.conf?
Is the system clock correct? What time zone does the system use?
Actually, I have this issue on many logs.
What is the TIME_FORMAT setting in props.conf?
Example of props.conf for the two pictures below :