Issue with date

I have found when I add an entry there is no issue but when I attempt to modify the record I see the following and at no time do I have anything in my log file that says "tco". The only location for this is where It says Petco

{
     "checkdate" => "tco",
          "tags" => [
        [0] "_dateparsefailure"
    ],
          "host" => "elk.mikesdevhub.com",
      "@version" => "1",
    "@timestamp" => 2019-11-08T01:47:19.034Z,
          "path" => "/etc/logstash/fish/10gFresh.csv",
       "message" => "tco"
}
{
     "checkdate" => "Nov 6 2019 12:00:00",
          "temp" => 0.0,
      "hardness" => 0.0,
      "nitrates" => 80.0,
       "reading" => 1,
      "salinity" => 0.0,
    "Alkalinity" => 60.0,
            "pH" => 7.1,
      "nitrites" => 0.0,
       "ammonia" => 2.0,
          "host" => "elk.mikesdevhub.com",
      "@version" => "1",
    "@timestamp" => 2019-11-06T12:00:00.000Z,
      "chlorine" => 0.0,
           "who" => "petco",
          "path" => "/etc/logstash/fish/10gFresh.csv",
       "message" => "Nov 6 2019 12:00:00,1,0.0,7.1,60.0,0.0,0.0,0.0,2.0,0.0,80.0,petco"
}

It appears that my specified date field is not pulling from the appropriate column. Why is this happening? I have done some testing and have seen this

What does your configuration look like?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.