Date pattern match help needed

Hi All ,

I have a date format like "Jul 22, 2019 4:54:10 PM CEST" . I am trying to find a pattern for a date match but i am unable to .

Can someone please help ?

CEST is not a timezone that Joda understands. You can use mutate to replace it with something it does understand

mutate { gsub => [ "someField", "CEST$", "region/location" ] }

then match it using

date { match => [ "someField", "MMM dd, YYYY hh:mm:ss a ZZZ" ] }
1 Like

Thank you for that amazingly quick response . The suggestion worked for me .