When I import datetime data as index it's changed to as below:
2018-10-20 11:55:46 -> January 20th 2018, 11:55:46.000
here is my date filter from conf
date {
locale => "en"
match => ["Created","YYYY-MM-DD hh:mm:ss"]
target => "Created Time"
}
I'm new user in ELK. Really appreciate any help.
Thanks
"January 20th 2018, 11:55:46.000" is just Kibana's way of displaying the time. After using the date filter your time is handled as a Timestamp object and the way it looks depends on the software. If you have a look at the JSON of your events, you'll see a different format.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.