Having a difficult time with the data filter. the 'message' field contains:
2018.06.27 00:22:23:209 UTC | FieldDebug | CommonPersistency
my logstash filter:
match => ["message", "yyyy.MM.dd HH:mm:ss:SSS ZZZ"]
target => "@timestamp"
Tried different variations of the timezone ZZZ => no space between S and Z, single Z, not including it in the match). all results in _dateparsefailure.
Any advice on what i'm doing wrong ?