Date Module Filebeat

Elastic Stack Beats
,
#1

hi,
i'm create module fail2ban in filebeat but i have problem in date not match with dicovery kibana:

image
image1586×106 7.46 KB

and this is Pipeline module fail2ban:

    {
      "date" : {
        "field" : "fail2ban.date",
        "target_field" : "@timestamp",
        "formats" : ["yyyy-MM-dd HH:mm:ss,SSS"]
      }
    },

how to sloved match date discovery kibana and source logs ?

#2

You'll need a grok/dissect processor to extract the date field from the message and then u can use the date processor.

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.