Date filter failure

I am trying to parse "datum" into "@timestamp". This is the output

          "tags" => [
        [0] "_dateparsefailure"
      "@version" => "1",
         "datum" => 2018-03-01T01:24:31.037Z,
    "@timestamp" => 2018-08-09T13:13:01.536Z

this is my filter

filter {
	date {
		match => [ "datum", "ISO8601" ] 

There is no errormessage.

If i understand the documentation, the ISO8601 should recognize my datum-value (which is a string, which I tested when I tried to mutate/replace timestamp with datum).

Any ideas how I could get this to work?

See and the workaround mentioned there.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.