Changing Time Format

Elastic Stack Logstash
2

If you want those fields to be strings in a particular format then I suggest using a date filter to parse them into LogStash::Timestamp objects, then ruby and strftime to set the format you want. Something like this

date {
    match => [ "deviceCustomDate1", "M/d/YYYY h:mm:ss a" ]
    target => "[@metadata][deviceCustomDate1]"
}
ruby {
    code => '
        t = Time.at(event.get("[@metadata][deviceCustomDate1]").to_f)
        event.set("deviceCustomDate1", t.strftime("%b %d %Y %H:%M:%S"))
    '
}

Not sure if you want to replace %d with %-d or %e.