I have a time field that has dates like: 2018-09-21T08:10:22.441223-0400 and I tried to create my template with the following:
"format" : "YYYY-MM-dd'T'HH:mm:ss.SSSSSS-Z"
"format" : "YYYY-MM-ddTHH:mm:ss.SSSSSS-Z"
"format" : "YYYY-MM-dd'T'HH:mm:ss.SSSSSSZ"
All these fail with the reason of "failed to parse" caused by "illegal_argument_exception" reason "Invalid format: "2018-09-21T08:10:22.441223-0400" is malformed at "T08:10:22.441223-0400"
Some additional info: Maybe I'm missing something, but the timestamp is in the same format and for that I'm simply using the logstash config of:
match => [ "datefield" , "ISO8601" ]
is there a template equivalent? I have not been able to find at http://www.joda.org/joda-time/key_format.html or at http://www.joda.org/joda-time/apidocs/org/joda/time/format/ISODateTimeFormat.html