_dateparsefailure

[Lucifer_hbp]

Hi,
How to write grok match for following date in logstash:
20161219T003209.939-05:00

I have tried following but it is giving "_dateparsefailure:"

date{
match => [ "timestamp" , "yyyyMMddHHmmss.SSSZ" ]
}

Any help please!!!

[jsvd (João Duarte)]

your format has T in the middle, so you need this instead:

filter { date { match => [ "message" , "yyyyMMdd'T'HHmmss.SSSZ" ] } }

[Lucifer_hbp]

Sry for the delayed reply, this pattern worked

Thanks alot !!