Is Z in input time valid for Z in Logstash date filter?

Hi,

I am using ELK GA 5.0.0. I am taking input from Kafka and I have a date field like 2018-03-23T13:14:33.419Z. In my date filter, I am using the format;

date {
	match => [ "log_time", "yyyy-MM-ddTHH:mm:ss.SSSZ" ]
	timezone => "UTC"
	target => "@timestamp"
}

In the Logsash date documentation, it is provided that Z is for Timezone offset structured as HHmm. How can I parse the date in this situation, or am I doing it right?

Thanks in advance.

Hi,

Try just matching with the standard ISO8601.

date {
    match => [ "log_time", "ISO8601" ]
  }

Hope this helps.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.