How change pattern of data?

Elastic Stack Elasticsearch
1

i have this format in kibana

Jul 27, 2022 @ 15:27:26.598

but is have a problem not order correctly with create a field datetime in logstash


filter {

   grok {
           match => ["message", "%{TIMESTAMP_ISO8601:logmessage}"]
     }

 
     date {
	         match => [ "logmessage", "ISO8601", "YYYY-MM-dd HH:mm:ss" ]
	         target => "logdate"
	        
        }


}

but message original is correct in kibana

image
image921×157 24.6 KB

i see json is correct kibana is very bad

 ],
    "log.file.path": [
      "/opt/wildfly/standalone/log/server.log.2022-07-27"
    ],
    "message.keyword": [
      "2022-07-27 18:18:35,951 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://0.0.0.0:9990/management"
    ],
    "logdate": [
      "2022-07-27T16:18:35.951Z"
    ],
    "@version": [
      "1"
    ],
2

The logdate in your json seems correct, are you referring to @timestamp?

3

yes logdate but i've resolved with change the datetime format in kibana options

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.