Hi,
I have jdbc input that selects from MySQL. One of the fields is called report_date from type datetime.
filter {
date {
match => [ "report_date", "yyyy-MM-dd HH:mm:ss" ]
target => "report_date"
}
}
output {
elasticsearch {
hosts => ["http://localhost:9200"]
index => "digest_%{+YYYY.MM.dd}"
}
}
Still, in ES the date in the index is taken from @timestamp
and I also see "tags" : ["_dateparsefailure"]
I read similar topics, but didn't find the reason. Any ideas?