Able to parse [18/Jun/2021:15:42:25 +0530] but still getting _dateparsefailure in kibana

Elastic Stack Kibana
1

Below is my block which i have used every thing is getting parse even date is getting parse but getting _dateparsefailure so unable to understand what is the exact issue

match_extended => { "message" => [
{ pattern => "%{IP} - - [(?<DATA:timestamp>[^]]+)] "%{WORD:request} %{NOTSPACE:url} HTTP/1.1" %{DATA:status} +(%{NUMBER:number_of_bytes}|-)"
}
]
}
}

date {
match => [ "timestamp" ,"ISO8601","dd/MMM/YYYY:HH:mm:ss Z" ]
#timezone => "Asia/Kolkata"
}

2

Hi @Saurabh_Nigudkar Welcome to the community

Could you give us your full logstash config and a couple lines of your logs that would help a lot.

Please please format your code and logs using the format button </> select the text/code and press the button

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.