Elasticsearch Date Processor not parsing properly

Elastic Stack Elasticsearch
1

I'm trying to parse a log date with an Elasticsearch ingest pipeline, using date processor, but the parsed date is not correct.
All the other pipelines that I've created work correctly, except this one.

Here is what I'm using:

Raw log date: Tue Oct 22 10:58:00.645020 2019
Processor:
"date": { "field": "log.time", "target_field": "@timestamp", "formats": ["EEE MMM dd H:m:s.SSSSSS yyyy"] }
Result: 2019-10-22T00:00:00.000Z

The date shown in the log.time field is correct (Tue Oct 22 10:58:00.645020 2019)

I've also tried the following format, without success: EEE MMM dd HH:mm:ss.SSSSSS yyyy

2

Maybe instead of S (fraction-of-second), try n (nano-of-second).

3

Doesn't work neither.

4

Apparently, I was looking at the wrong timestamp field (ingest one)...

Using EEE MMM dd H:m:s.SSSSSS yyyy works.

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.