Hi everyone!
I have a problem using the logstash date filter. I have a date string formatted like this:
ddMMyyyy'T'HHmmss
in a field (called scheduledTime) of a json log.
I need to convert this string into a date to index into Elasticsearch. I'm trying to use the date filter like this
date {
match => ["scheduledTime", "ddMMyyyy'T'HHmmss"]
}
but this doesn't work. But if I change the way the string is formatted, using the following format
yyyy-MM-dd'T'HH:mm:ss
and then change the format specified in the date filter like this
date {
match => ["scheduledTime", "yyyy-MM-dd'T'HH:mm:ss"]
}
everything works fine and scheduledTime field is indexed as Date on Elasticsearch.
My question is: how can I use the date filter to use the first format (ddMMyyyy'T'HHmmss)? Is there somethins else I need to specify somewhere?
Regards,
Antonio.