I have a problem using the logstash date filter. I have a date string formatted like this:
in a field (called scheduledTime) of a json log.
I need to convert this string into a date to index into Elasticsearch. I'm trying to use the date filter like this
match => ["scheduledTime", "ddMMyyyy'T'HHmmss"]
but this doesn't work. But if I change the way the string is formatted, using the following format
and then change the format specified in the date filter like this
match => ["scheduledTime", "yyyy-MM-dd'T'HH:mm:ss"]
everything works fine and scheduledTime field is indexed as Date on Elasticsearch.
My question is: how can I use the date filter to use the first format (ddMMyyyy'T'HHmmss)? Is there somethins else I need to specify somewhere?