I have a date in the format 06/30/2016 00:21:49 , I am trying to parse this date using
date {
match => [ "time", "MM/dd/YYYY HH:mm:ss" ]
}
But the date is still a string value.
So how can I parse a date if it is not there in prewritten date pattern ??
eperry
(Ed)
January 9, 2017, 2:09am
2
Yes it will be as the date command is not changing your field By default it updates the @TIMESTAMP field
https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-target
Ajit_Singh
(Ajit Singh)
January 18, 2017, 6:32am
3
Yeah ! What you said was right. I added target => "date-time"
(date-time is my custom date field) and now it is working as expected.
system
(system)
Closed
February 15, 2017, 6:32am
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.