_dateparsefailure Logstash 7.17

Elastic Stack Logstash
1

Hi to all!

The field I index to Elasticsearch is 03/03/2020 11:11:11 AM.

I tried with different filters

date {
match => ["time","dd/MM/YYYY hh:mm:ss a"]
target => "time"
}
date {
match => ["time","dd/MM/YYYY hh:mm:ss aa"]
target => "time"
}
date {
match => ["time","dd/MM/YYYY HH:mm:ss a"]
target => "time"
}
date {
match => ["time","dd/MM/YYYY KK:mm:ss a"]
target => "time"
}

I tried these filters without luck. I was looking for it at the doc in Date filter plugin | Logstash Reference [7.17] | Elastic
but i couldn't find it

Someone could help with this?

2 
      add_field => ["time", "03/03/2020 11:11:11 AM"]

...

	date {
		match => ["time","dd/MM/yyyy hh:mm:ss a"]
		target => "time2"
	}

Will produce:
"time" => "03/03/2020 11:11:11 AM" ,
"time2" => 2020-03-03T10:11:11.000Z

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.