Date filter not working with AM | PM

Elastic Stack Logstash
1

I have some log file for example this:

{logtimestamp: Mar 29, 2019 11:43:22:948 AM SEVERE: ############SESSION JVM }

As I want to use the timestamp in the log file, I use a data filter to match it

date {
match => ["logtimestamp","MMMM dd, yyyy hh:mm:ss a"]
target => "dateformat"
}

But when I look into Kibana, I didn't find "dateformat" index.

I also tried with this, but i didn't get
match => ["logtimestamp", "MMMM dd, yyyy HH:mm:ss:SSS"]
if i remove AM | PM then its working correct, but the problem is how we can identify when it happen.

Can somebody tells me how to fix this?

2

You need to match the milliseconds too

match => ["logtimestamp", "MMM dd, yyyy hh:mm:ss:SSS a"]
3

thank you very much @Badger its working correct what i need exactly same.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.