Pipeline aborted due to error {:pipeline_id=>"main", :exception=>#<Grok::PatternError: pattern %{CISCOTIMESTAMPTZ:log_date} not defined>

You're attempting to use a grok pattern, CISCOTIMESTAMPTZ, that Logstash doesn't know about. It doesn't appear to be a standard pattern bundled with Logstash.

1 Like