_dateparsefailure


(LuciferHBP) #1

Hi,
How to write grok match for following date in logstash:
20161219T003209.939-05:00

I have tried following but it is giving "_dateparsefailure:"

date{
match => [ "timestamp" , "yyyyMMddHHmmss.SSSZ" ]
}

Any help please!!!


(João Duarte) #2

your format has T in the middle, so you need this instead:

filter { date { match => [ "message" , "yyyyMMdd'T'HHmmss.SSSZ" ] } }


(LuciferHBP) #3

Sry for the delayed reply, this pattern worked :slight_smile:

Thanks alot !!


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.