Cant convert timestamp field from text to date

Elastic Stack Kibana
1

hello everyone,
i got problem converting log.timestamp field from text to date
someone can help me understand what am i doing wrong?

i also will appreciate if do you have an idea of getting the day of the week from this timestamp (log.timestamp), i think after i will accomplish to convert to date type it will be more sense:)
like (sunday,monday...)

here is my conf file from logstash
---------------------conf file---------------------------------

input {
jdbc {
jdbc_connection_string => "jdbc:sqlserver://10.211.2.9:1433;databaseName=SNJ_CAP_CBM;integratedSecurity=false;encrypt=false;trustServerCertificate=true;"
jdbc_user => "SO"
jdbc_password => "1234"
jdbc_driver_library => "/etc/logstash/conf.d/logstash-core/lib/jars/mssql-jdbc-11.2.0.jre8.jar"
jdbc_driver_class => "com.microsoft.sqlserver.jdbc.SQLServerDriver"
statement => "select datepart(weekday,substring(JSON_VALUE(payload,'$.log.timestamp'),1,len(JSON_VALUE(payload,'$.log.timestamp'))-3)) as Day, payload from dbo.tbl_partly_log"
}
}
filter {
json {
source => "payload"
}
grok {
match => { "[log][timestamp]" => "%{YEAR:year}-%{MONTHNUM:month}-%{MONTHDAY}%{GREEDYDATA}" }
}
date {
match => ["[log][timestamp]", "YYYY-MM-dd HH:mm:ss.SSSSSS"]
target => "[log][timestamp]"
}
}
output {
stdout {
codec => rubydebug{}
}
elasticsearch {
hosts => ["https://10.211.3.164:9200"]
index => "cbm-log"
user => "elastic"
password => "jSDE58rJj8I7BhyJCs-c"
ssl => true
ssl_certificate_verification => false
cacert => "/etc/logstash/http_ca.crt"
doc_as_upsert => true

}
}

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.