Correct @timestamp format for JSON ingress

Elastic Stack Beats
1

Hi. I'm using Filebeat to import data from a log file that is putting a JSON object in a log file.

I am getting parser errors on import:

@timestamp not overwritten (parse error on 2017-02-27T16:19:08)

An example of a line is:

{"remoteHost": "81.109.116.50","remoteUser": "-","@timestamp": "2017-02-27T16:15:38","requestMethod": "GET"}

What is the correct and parsable date/time format for the @timestamp?

thanks

2

Turns out I was just missing the terminating Z, so this is what I ended up with:

2017-02-27T16:15:38Z
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.