Hi Guys,
I've recently updated my entire ELK cluster to the latest version. I basically started from scratch.
I have the following config file setup for my logstash output to elasticsearch.
https://pastebin.com/VCBhgaqv
For the life of me I cannot get the date conversions to work. When I look at the mapping on Kibana everything else has been converted and working perfectly except the dates.
"timeLogged": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
"timeQueued": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
},
Please help!