How to parse this date pattern

Elastic Stack Logstash
1

I've the following XML

<lsfIndicatorEvent>
   <startDate>2016-08-08T13:40:00.000+01:00</startDate>
</lsfIndicatorEvent>

and inside the filter, have the multiline plugin and the xml as followed:

xml {
    source => "message"
    target ="xml_message"
    store_xml => false
    xpath => [
	"/lsfIndicatorEvent//dimension[1]/text()" , "layer",
        "/lsfIndicatorEvent//startdate/text()", "startDate"
        ]
}

I can get the layer and the startDate as strings, but now I can't convert that startDate to date without giving me, failed parsing date.

2

Using a date filter with the ISO8601 pattern doesn't work? What error message do you get?

1 Like
3

After many tries, it worked. Sorry for bothering.