Log: 2016-11-19 05:15:34.537 [INFO ] [15722:119885] Blah blah blah
Date Config:
date {
match => [ "timestamp" , "yyyy-MM-dd HH:mm:ss.SSS" ]
timezone => 'UTC'
locale => 'en'
}
Error: {:timestamp=>"2016-11-19T05:16:05.983000+0000", :message=>"Failed parsing date from field", :field=>"timestamp", :value=>"2016-11-19 05:15:34.537", :exc
eption=>"Invalid format: "2016-11-19 05:15:34.537" is malformed at ".537"", :config_parsers=>"yyyy-MM-dd HH:mm:ss Z", :config_locale=>"en", :level=>
:warn}
This is only thrown when pushed into elasticsearch, but when I run the configuration manually (bin/logstash -f config) it parses just fine.
Any ideas ?