TIMESTAMP_ISO8601 in date not working

I have a date as below:

2018-06-21 13:25:09-04:00

my logstash filter for date is as below:
date {
match => [ "DeviceDate", "TIMESTAMP_ISO8601"]
target => "@timestamp"
}

however i get below error on :

Cannot create pipeline { :reason=>"Illegal pattern component: T"}

Any clue how to fix this?

It's falling over at the first T in TIMESTAMP_ISO8601. You could change that to

match => [ "DeviceDate", "ISO8601"]

Which would run, but return a date parse failure. Try

match => [ "DeviceDate", "yyyy-MM-dd HH:mm:ssZ"]

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.