I am try to replace the timestamp with the field from log file. But it is not getting updated. Getting Date parse error _dateparsefailure and still not getting updated. Attached the config file for reference.
Date in the Log file format is :6/19/2018 9:42:00 PM
input {
file {
path => "D:/IntraDay1.csv"
start_position => beginning
# to read from the beginning of file
sincedb_path => "/dev/null"
}
}
filter {
csv {
columns => ["Dispo"]
}
mutate {
convert => {
"
}
}
date {
match => ["DateTime", "yyyy-MM-dd HH:mm:ss,SSS"]
timezone => "UTC"
add_field => { "Status" => "Matched"} # add_tag => [ "timestamp_matched"]
}
}
output {
elasticsearch {
action => "index"
hosts => "localhost:9200"
index => "intraday"
workers => 1
}
stdout { codec => rubydebug }
}