Add processor to set timezone for an event

libbeat/beat/beat.go

@@ -63,6 +63,7 @@ import (
 	// Register default processors.
 	_ "github.com/elastic/beats/libbeat/processors/actions"
 	_ "github.com/elastic/beats/libbeat/processors/add_cloud_metadata"
+	_ "github.com/elastic/beats/libbeat/processors/add_locale"
 
 	// Register default monitoring reporting
 	_ "github.com/elastic/beats/libbeat/monitoring/report/elasticsearch"

libbeat/processors/add_locale/add_locale.go

@@ -0,0 +1,34 @@
+package actions
+
+import (
+	"time"
+
+	"github.com/elastic/beats/libbeat/common"
+	"github.com/elastic/beats/libbeat/processors"
+)
+
+type addLocale struct {
+	timezone string
+}
+
+func init() {
+	processors.RegisterPlugin("add_locale", newAddLocale)
+}
+
+func newAddLocale(c common.Config) (processors.Processor, error) {
+	zone, _ := time.Now().Zone()
+
+	l := addLocale{timezone: zone}
+
+	return l, nil
+}
+
+func (l addLocale) Run(event common.MapStr) (common.MapStr, error) {
+	event.Put("beat.timezone", l.timezone)
+
+	return event, nil
+}
+
+func (l addLocale) String() string {
+	return "add_locale=" + l.timezone
+}

libbeat/processors/add_locale/add_locale_test.go

@@ -0,0 +1,44 @@
+package actions
+
+import (
+	"testing"
+	"time"
+
+	"github.com/elastic/beats/libbeat/common"
+	"github.com/elastic/beats/libbeat/logp"
+	"github.com/stretchr/testify/assert"
+)
+
+func TestExportTimeZone(t *testing.T) {
+	var testConfig = common.NewConfig()
+
+	input := common.MapStr{}
+
+	zone, _ := time.Now().In(time.Local).Zone()
+
+	actual := getActualValue(t, testConfig, input)
+
+	expected := common.MapStr{
+		"beat": map[string]string{
+			"timezone": zone,
+		},
+	}
+
+	assert.Equal(t, expected.String(), actual.String())
+}
+
+func getActualValue(t *testing.T, config *common.Config, input common.MapStr) common.MapStr {
+	if testing.Verbose() {
+		logp.LogInit(logp.LOG_DEBUG, "", false, true, []string{"*"})
+	}
+
+	p, err := newAddLocale(*config)
+	if err != nil {
+		logp.Err("Error initializing add_locale")
+		t.Fatal(err)
+	}
+
+	actual, err := p.Run(input)
+
+	return actual
+}