Parsing error in date format

Hi Team

getting below error in parsing the date in logstash. Kindly suggest how this can be resolved.

"error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field [ResponseTime] of type [date] in document with id '32KUH4gB96hGxKLH90gP'. Preview of field's value: '15/05/2023 18:52:60.000'", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"failed to parse date field [15/05/2023 18:52:60.000] with format [strict_date_optional_time||epoch_millis]", "caused_by"=>{"type"=>"date_time_parse_exception", "reason"=>"Failed to parse with all enclosed parsers"}}}

Below is the config for conversion

    date {

        match => [ "RequestTime", "dd/MM/yyyy HH:mm:ss.SSS" ]

        target => "RequestTime"

    }

    date {

        match => [ "ResponseTime", "dd/MM/yyyy HH:mm:ss.SSS" ]

        target => "ResponseTime"

    }

Each occurrence is at 000 millisecond and failing with above error.

@Wolfram_Haussig please suggest here.

18:52:60 with 60 seconds should have rolled over to 18:53:00 unless there was a leap second in that minute. A leap second would only occur at the end of the month, so that time appears to be invalid.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.