- time must be in UTC (LOGSTASH-1295)