From 13bf21bb82754056ddf0b847cdb129a929d2cb2a Mon Sep 17 00:00:00 2001
From: t3chn0m4g3 <t3chn0m4g3@gmail.com>
Date: Thu, 29 Jan 2026 14:05:00 +0100
Subject: [PATCH] Fixes #1866, thank you @regulartim for reporting

---
 docker/elk/logstash/dist/http_output.conf | 5 +++++
 docker/elk/logstash/dist/logstash.conf    | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/docker/elk/logstash/dist/http_output.conf b/docker/elk/logstash/dist/http_output.conf
index 9c1932a1..7d2a4584 100644
--- a/docker/elk/logstash/dist/http_output.conf
+++ b/docker/elk/logstash/dist/http_output.conf
@@ -598,6 +598,11 @@ filter {
 
 # Ipphoney
   if [type] == "Ipphoney" {
+    mutate {
+      gsub => [
+        "timestamp", "\+00:00Z$", "+00:00"
+      ]
+    }
     date {
       match => [ "timestamp", "ISO8601" ]
     }
diff --git a/docker/elk/logstash/dist/logstash.conf b/docker/elk/logstash/dist/logstash.conf
index ad23f165..ab74d24a 100644
--- a/docker/elk/logstash/dist/logstash.conf
+++ b/docker/elk/logstash/dist/logstash.conf
@@ -598,6 +598,11 @@ filter {
 
 # Ipphoney
   if [type] == "Ipphoney" {
+    mutate {
+      gsub => [
+        "timestamp", "\+00:00Z$", "+00:00"
+      ]
+    }
     date {
       match => [ "timestamp", "ISO8601" ]
     }