Mongodb parset timestamp is wrong

Hi All.

I recently tried to start mongodb filebeat plugin (v 6.3.2)

To my surprise, all parsed logs appears as from Jan this year (day is correct).

json doc stored in ES (anonymized)

"_index": "filebeat-mongodb-log-6.3.2-2018.08.13",
"_type": "doc",
"_id": "jz_pMmUBbSk-ag5Bud9u",
"_version": 1,
"_score": null,
"_source": {
"offset": 125734985,
"prospector": {
"type": "log"
"read_timestamp": "2018-08-13T10:51:38.085Z",
"source": "/var/log/mongodb/mongod.log",
"fileset": {
"module": "mongodb",
"name": "log"
"input": {
"type": "log"
"@timestamp": "2018-01-13T10:51:37.575Z",
"beat": {
"hostname": "xxx",
"name": "xxx",
"version": "6.3.2"
"host": {
"name": "xxx"
"mongodb": {
"log": {
"severity": "I",
"component": "xxx",
"context": "xxx",
"message": "xxx"
"fields": {
"@timestamp": [
"sort": [

And a log line looks like (anonymized):

2018-08-13T11:54:11.537+0000 I XX     YYY

Is there some sort of a bug, or am I misconfiguring something?

Thank You
Piotr Rybicki

This is a bug. Please open an issue on GIthub.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.