_dateparsefailure in ISO8601 date strings

I wonder if you are hitting this issue. The jdbc input will convert date/time columns into LogStash::Timestamp objects, which a date filter cannot parse. You could try using mutate+convert to make [evtime] a string before parsing it.