this is my struct
"payload" => { "status" => "success", "createdAt" => "2019-07-01 12:34:45 +0000", "id" => "5d19fde56eca4555d9f61b",
and this is my logstash filter
> if "transactions" in [tags] { > > date { > match => ["[payload][createdAt]", "yyyy-MM-dd HH:mm:ss ZZZ"] > target => "createdAt" > }
is there something wrong with my my filter syntax ?