How to fetch syslog date from body in logstash filter

[sundar1 (sundar)]

The below one is my json and fetch the date from the body and convert to logstash timestamp.
"Mar 1 04:57:10" date should come as a @timestamp.
{
"host" => "vc2cm.com",
"@version" => "1",
"location" => "MMK",
"body": "Mar 1 04:57:10 adinfo[19530]: INFO base.nocachemode Disabling the agent directory cache\n",
}

Please help me.

[magnusbaeck (Magnus Bäck)]

Use the grok filter to parse the contents of the body field and extract the timestamp to a separate field, then use a date filter to parse the timestamp string into the @timestamp field. What you have is close to the syslog example here: https://www.elastic.co/guide/en/logstash/current/config-examples.html#_processing_syslog_messages