How to convert yyyyMMddHHmmssSSSZ string into timestamp

Elastic Stack Logstash
1

Hi ,

I want to convert date string yyyyMMddHHmmssSSSZ to timezone , I have tried with
date {
match => ["datetime", "YYYYMMddHHmmssSSS" ]
target => "datetime"
}
but i am getting _dateparsefailure in tags.

How to convert this?

2

Hard to say without an example.
Anyway I moved your question to #logstash

3

Hi ,

Sample log statement is : [INFO] SYSLOG->|datetime:20190218142929801+0530|hostname:ABCD

4

What is in the field datetime?

5

datetime is string field

6

What exactly are the contents of the string field?

7

Datetime field having datetime in this format yyyyMMddHHmmssSSSZ

8

If it has that format then

date { match => [ "datetime", "yyyyMMddHHmmssSSSZ" ] }

will parse it.

9

getting _dateparsefailure tag

10

Then it does not have the format that you claim it has. Given that you have not shown us the data there is nothing else I can do to help.

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.