Continuing the discussion from Date Filter Not working parsing IIS logs : [image] Date Filter Not working parsing IIS logs I'm having trouble with the date filter. it doesn't seem to be updating the timestamp correctly. filter { if [type] == "iis" { grok { match => {"message" => "%{T…

Thank you for asking... Now I see that Kibana timestamp is 2 hours later than the log. So I added the correct timezone to the date filter and it works. Thanks

Having trouble with the date filter for iis logs

Elastic Stack Logstash

Doron_Raz (Doron Raz) June 10, 2018, 1:56pm 2

and here is the iis log entry:

2018-06-02 23:50:10 10.1.0.250 GET /Images/Homepage/Promotion/201da2a5.jpg - 443 52332470000003 10.1.10.85 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/66.0.3359.181+Safari/537.36 200 0 0 31

Topic		Replies	Views
Date Filter Not working parsing IIS logs Logstash	7	1687	May 18, 2017
Date filter for logstash Logstash	5	456	March 19, 2018
Add date field from IIS-log Logstash	5	1114	July 10, 2017
Importing old IIS logfiles. Timestamp is today instead of date/time in logfile Logstash	3	2296	July 6, 2017
Logstash Timestamp date field filter not parsing properly Logstash	11	2389	July 26, 2017

Having trouble with the date filter for iis logs

Related topics