INPUT
"TIME" => "200254300",
"DATE" => "211223",
above value have a number format
how can I change to the timestamp, I've tried by following code but got [_dateparsefailure] in tag
add_field => { "ts" => "%{DATE} %{TIME}" }
}
mutate {
remove_field => ["message"]
}
date { match => ["ts", "yyMMdd HH:mm:ss:SSS", "ISO8601"]
timezone => "Europe/Berlin"
target => "@timestamp"
remove_field => ["ts"]
}
}