Date is not getting converted into right timezone

[sachinvy]

Hi all,

Here is my filter

Input:

03-27-18 09:32:10,590 [2184] TRACE SFTP <> - [139C9318] msg: 2024502473 Sending SSH_MSG_KEX_31 (139 bytes, seq nr 1)

Filter:

grok{
            match => {"message" => "%{DATESTAMP:date}\,%{NUMBER:msgnum} \[%{NOTSPACE:session}\] %{LOGLEVEL:src} %{GREEDYDATA:msgdata}"}
            #overwrite => ["message"]
        }
        date {
        	match => [ "date", "mm-dd-yy hh:mm:ss"]
            locale => "en-US"
        	timezone => "America/New_York" 
            target => "@timestamp"                  	        	
      	}

Output:

   "date" => "2018-03-25 04:00:00",
        "sc-port" => 21,
     "@timestamp" => 2018-04-12T17:11:39.749Z,

As you can see date is not properly getting converted into @timestamp. Any help would be appreciated.

Thanks

[sachinvy]

Sorry wrong output. Here is the correct output:

"@timestamp" => 2018-01-27T14:32:10.000Z,
"session" => 2184,
"date" => "03-27-18 09:32:10",

[Badger]

@sachinvy

"mm-dd-yy hh:mm:ss"

That should be MM-dd-yy hh:mm:ss, or, more likely, MM-dd-yy HH:mm:ss

[sachinvy]

@Badger

MM-dd-yy HH:mm:ss

You nailed it again Mr Badger. Thank you very very much.