Thanks Badger. Unfortunately, it doesnt seem to do anything.
I added the below, but it doesnt ingest anything.
filter {
json {
source => "message" target => "someField" remove_field => [ "message" ]
}
split {
field => "someField"
}
date {
match => [ "[someField][date]", "YYYY-MM-dd'T'HH:mm:ssZZ" ]
}
}