My Timestamp in audit log using SYSLOG input plugin not in correct format

[Badger]

I am not speaking to your use case, but in general adding the current year is not what you want. The date filter has heuristics to guess what year is applicable, but there will always be exceptions where that goes wrong.