Parse this date format? (Oct 3 11:32:48)

Elastic Stack Logstash
1

I can parse log file dates like:

  1. "Oct 3 11:32:48" with "MMM d HH:mm:ss"

  2. "Oct 03 11:32:48" with "MMM dd HH:mm:ss"

Now i have:

  1. "Oct 3 11:32:48" (notice there are two spaces before the single digit month-day.)

Is there a parsing pattern that could work here?

  • Jeff
2

You need both date patterns above. The date filter can list multiple patterns in the same match line so that's not a problem.