Date FIlter - _dateparsefailure [SOLVED]

Elastic Stack Logstash
2

It seems to work fine with that date pattern:

% echo "Nov 2 10:40:49" | bin/logstash -e 'input { stdin {} } filter { date { match => [ "message", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"] } }'
{
    "@timestamp" => 2016-11-02T10:40:49.000Z,
      "@version" => "1",
          "host" => "Joaos-MBP-5.lan",
       "message" => "Nov 2 10:40:49"
}

Are those events also populated with the _grokparsefailure? or just the _dateparsefailure?

1 Like