I can't find the GROK pattern of Time format?

Elastic Stack Logstash
1

hello evreyone ,

i can't find the GROK pattern of this Time format ;

Dec 17 00:00:01
please help me to find it !!

2

Have you tried using http://grokconstructor.appspot.com/do/construction to find a matching pattern?

3

Use some thing like below

(?<TIMESTAMP>%{MONTH:month} %{MONTHDAY:day} %{TIME:time})

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.