I am trying to parse the date with different timezone, but I get the "Failed parsing date from field".
I dont know where I go wrong.
Here are the conf I use:
filter{
date{
match => [ "eventTime", "YYYY/MM/dd HH:mm:ss.SS" , "YYYY/MM/dd HH:mm:ss.SSS" , "YYYY/MM/dd HH:mm:ss.SSSSSSZ", "YYYY/MM/dd HH:mm:ss.SSSSSSZZ"]
add_tag => ["date_filter"]
target => "@timestamp"
}
}
The dates in eventTime field to be matched are:
2015/12/15 05:05:9.957 , 2015/12/15 05:05:9.393040 +00:00 , 2015/12/15 05:05:9.393040 +0530
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.