Timestamp for logstash syslog output when specifying RFC5424


I just started using the syslog output plugin. I am processing past logs (2017). I specified rfc => "rfc5424" I am also using the date filter to map the log date to @timestamp.
On my receiving server, the timestamp shows up in rfc3164 format aka MMM dd HH:mm:ss format
Is this expected or does specifying rfc5424 also change the format of the timestamp?

"Feb 24 01:43:17"

logstash version 6.2.3
logstash-output-syslog 3.0.4


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.