Date issues with Logstash

All I have the following log
[Feb 15, 2017 09:35:43 AM GMT, ERROR] UpdateForecastFieldsFromTemplatePostPX.java:doAction():359)

My gork expression looks like
%{TIMESTAMP_ISO8601:logdate}%{LOGLEVEL:log-level}]%{GREEDYDATA:message}

I do not get an output for the logdate but the log-level and message work fine. Any idea what Im doing wrong. please help

TIMESTAMP_ISO8601 won't match the time format you have, you can try matching filters using this page
https://grokdebug.herokuapp.com/ try debugger and use your expression try matching with autocomplete

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.