How to convert yyyyMMddHHmmssSSSZ string into timestamp

priya08 · February 15, 2019, 1:28pm

Hi ,

I want to convert date string yyyyMMddHHmmssSSSZ to timezone , I have tried with
date {
match => ["datetime", "YYYYMMddHHmmssSSS" ]
target => "datetime"
}
but i am getting _dateparsefailure in tags.

How to convert this?

dadoonet · February 15, 2019, 1:43pm

Hard to say without an example.
Anyway I moved your question to #logstash

priya08 · February 18, 2019, 6:19am

Hi ,

Sample log statement is : [INFO] SYSLOG->|datetime:20190218142929801+0530|hostname:ABCD

Badger · February 18, 2019, 1:06pm

What is in the field datetime?

priya08 · February 20, 2019, 10:43am

datetime is string field

Badger · February 20, 2019, 1:05pm

What exactly are the contents of the string field?

priya08 · February 20, 2019, 1:07pm

Datetime field having datetime in this format yyyyMMddHHmmssSSSZ

Badger · February 20, 2019, 1:13pm

If it has that format then

date { match => [ "datetime", "yyyyMMddHHmmssSSSZ" ] }

will parse it.

priya08 · February 20, 2019, 1:14pm

getting _dateparsefailure tag

Badger · February 20, 2019, 1:24pm

Then it does not have the format that you claim it has. Given that you have not shown us the data there is nothing else I can do to help.

system · March 20, 2019, 1:24pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.