How to write grock pattern for date([yyyy-MM-dd HH:mm:ss.SSS z] ) in logstash


(Nitin) #1

Hi,
In my log4j error logs, the datetime is printed in below format, I was trying to write a pattern in grock to parse that, but not getting the proper result.

[yyyy-MM-dd HH:mm:ss.SSS z]
ex. [2018-01-04 15:00:01.361 +0000UTC]

How can I parse such date and send this date as date type value so that I can create the filters as daterange in kibana?


(Magnus B├Ąck) #2

Have you tried using the grok constructor web site?


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.