This works as expected for me:
$ cat test.config
input { stdin { } }
output { stdout { codec => rubydebug } }
filter {
date {
match => ["message", "yyyy-MM-dd HH:mm:ss.SSSS"]
timezone => "Etc/UTC"
}
}
$ echo '2017-02-16 06:52:31.5999' | /opt/logstash/bin/logstash -f test.config
Settings: Default pipeline workers: 8
Pipeline main started
{
"message" => "2017-02-16 06:52:31.5999",
"@version" => "1",
"@timestamp" => "2017-02-16T06:52:31.599Z",
"host" => "lnxolofon"
}
Pipeline main has been shutdown
stopping pipeline {:id=>"main"}