I was trying to parse Julian time in Logstash and got dateparsefailure. Here is the log event I have 2020/197/21:13:57.605 FINE jdk.internal.event.EventHelper.logX509CertificateEvent
Here is the filter I have:
add_field => {
"event-time" => "%{year}%{DDD} %{eg_time}"
}
date {
match => ["event-time", "yyyyDDD HH:mm:ss.SSS"]
target => "event-time"
timezone => "Etc/UTC"
}
Thanks for your help.