Date filter failure

Elastic Stack Logstash
1

I am trying to parse "datum" into "@timestamp". This is the output

{
          "tags" => [
        [0] "_dateparsefailure"
    ],
      "@version" => "1",
         "datum" => 2018-03-01T01:24:31.037Z,
    "@timestamp" => 2018-08-09T13:13:01.536Z
}

this is my filter

filter {
	date {
		match => [ "datum", "ISO8601" ] 
	}
}

There is no errormessage.

If i understand the documentation, the ISO8601 should recognize my datum-value (which is a string, which I tested when I tried to mutate/replace timestamp with datum).

Any ideas how I could get this to work?

2

See https://github.com/logstash-plugins/logstash-filter-date/issues/95 and the workaround mentioned there.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.