Filebeat apache error fileset doesn't support timezones

[exekias]

Apache error fileset is not timezone aware, so dates are read as UTC.

We should update it to include the add_locale processor and take the local timezone into account when ingesting them. Similar NGINX module is already doing it with:

beats/filebeat/module/nginx/access/config/nginx-access.yml

Lines 8 to 9 in 983564f

	processors:
	- add_locale: ~

beats/filebeat/module/nginx/access/ingest/default.json

Lines 96 to 102 in 983564f

	"date": {
	"if": "ctx.event.timezone != null",
	"field": "@timestamp",
	"formats": ["ISO8601"],
	"timezone": "{{ event.timezone }}",
	"on_failure": [{"append": {"field": "error.message", "value": "{{ _ingest.on_failure_message }}"}}]
	}

[pa-jberanek]

It's worth stating that Apache access time parsing is OK, it's only error log parsing which is assuming UTC even though Apache writes out local time, with no TZ specifier.

Access:
[05/Jul/2019:03:40:43 +0100]
Error:
[Fri Jul 05 03:40:53.570294 2019]

[exekias]

You are right! I updated the description, thank you!