Hi, I need to replace the time coming from the logs to timestamp field. But i keep getting a parse failure. The loglines look like Time Stamp 11/14/16 15:14:25 Event Number 2004 I am using the following filters:- grok { patterns_dir => [ "/etc/logstash/conf.d/pattern" ] match => [ "messag…

Help with Date

aeva_assured (Andrew) November 17, 2016, 7:19pm 5

In the example you posted you are missing the trailing quotation in your match pattern.

should be

Topic		Replies	Views
How to override logstash @timestamp value with my date time field from the logs Logstash	7	8589	February 7, 2017
Get the correct timestamp from the log file Logstash	6	3099	July 6, 2017
Logstah date help Logstash	7	858	January 17, 2017
Change timestamp to be timestamp from logfile Logstash	3	549	July 11, 2017
Replace timestamp from logfile - dateparsefailure Logstash	7	1015	February 7, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Help with Date

Related topics