Date parsing

Elastic Stack Logstash
1

Hello,

i have a logfile generated by machine and i need to parse the date using logstash
in the date field the date format is for example 12/05/2017 11:49:05 and 4/Feb/2017 10:05:33
for the first format my parser worked

date {
          match => ["DATE", "dd/MM/yyyy HH:mm:ss"]
          timezone => "Europe/Paris"

}

for the second format how can i parse it like the first

thank you!

2

Use "d/MMM/yyyy HH:mm:ss" and "dd/MMM/yyyy HH:mm:ss" as your date patterns (the date filter accepts multiple patterns).

3

Thank you !

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.