In elasticsearch 6.3 indexing windows log using Nxlog(3.7).
Without any template all the fields indexed as strings. To get a date field we tried to change the Eventdate field as date. But getting parsing error.
the below config used for index template
"EventTime": {
"type": "date",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}