Correct @timestamp format for JSON ingress

Hi. I'm using Filebeat to import data from a log file that is putting a JSON object in a log file.

I am getting parser errors on import:

@timestamp not overwritten (parse error on 2017-02-27T16:19:08)

An example of a line is:

{"remoteHost": "","remoteUser": "-","@timestamp": "2017-02-27T16:15:38","requestMethod": "GET"}

What is the correct and parsable date/time format for the @timestamp?


Turns out I was just missing the terminating Z, so this is what I ended up with:


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.