Hi,
I have this time format in logfile:
time_stamp=[30/Apr/2021:15:23:46+0200]
When I use the date plugin:
kv {
source => "message"
field_split => "|"
}
date {
match => [ "time_stamp", , "dd/MMM/yyyy:HH:mm:ssZ" ]
target => "@timestamp"
locale => "en"
}
This is not working, the doc is not visible in ES.
Any idea what I did wrong?
thx!