Date filter plugin successfully matches but doesn't show up in Kibana

arun1 · July 30, 2018, 11:39am

Hi All,

Here is a snapshot of my logstash config file:

The Date filter is able to match the field logtime to the pattern yyyy-MM-dd hh:mm:ss but while creating index I can only see the field @timestamp in the dropdown; the logtime field comes as string only.

All help is greatly appreciated
Arun

Badger · July 30, 2018, 1:23pm

That appears to be working as expected. The date filter does not modify its source field, it writes to the "target" field. So logtime will be a string, and @timestamp will be a datetime.

tgaudin · July 30, 2018, 1:26pm

Also, you probably want to remove_field => ["logtime"] in your date filter, since timestamp isn't a field that exists in your grok pattern.

arun1 · July 31, 2018, 6:40am

@Badger, @tgaudin thanks a lot! It worked

system · August 28, 2018, 6:40am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.