I have found when I add an entry there is no issue but when I attempt to modify the record I see the following and at no time do I have anything in my log file that says "tco". The only location for this is where It says Petco
{
"checkdate" => "tco",
"tags" => [
[0] "_dateparsefailure"
],
"host" => "elk.mikesdevhub.com",
"@version" => "1",
"@timestamp" => 2019-11-08T01:47:19.034Z,
"path" => "/etc/logstash/fish/10gFresh.csv",
"message" => "tco"
}
{
"checkdate" => "Nov 6 2019 12:00:00",
"temp" => 0.0,
"hardness" => 0.0,
"nitrates" => 80.0,
"reading" => 1,
"salinity" => 0.0,
"Alkalinity" => 60.0,
"pH" => 7.1,
"nitrites" => 0.0,
"ammonia" => 2.0,
"host" => "elk.mikesdevhub.com",
"@version" => "1",
"@timestamp" => 2019-11-06T12:00:00.000Z,
"chlorine" => 0.0,
"who" => "petco",
"path" => "/etc/logstash/fish/10gFresh.csv",
"message" => "Nov 6 2019 12:00:00,1,0.0,7.1,60.0,0.0,0.0,0.0,2.0,0.0,80.0,petco"
}
It appears that my specified date field is not pulling from the appropriate column. Why is this happening? I have done some testing and have seen this