Date Module Filebeat

i'm create module fail2ban in filebeat but i have problem in date not match with dicovery kibana:

and this is Pipeline module fail2ban:

      "date" : {
        "field" : "",
        "target_field" : "@timestamp",
        "formats" : ["yyyy-MM-dd HH:mm:ss,SSS"]

how to sloved match date discovery kibana and source logs ?

You'll need a grok/dissect processor to extract the date field from the message and then u can use the date processor.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.