punit_j
(Punit Jain)
June 21, 2018, 5:32pm
1
I have a date as below:
2018-06-21 13:25:09-04:00
my logstash filter for date is as below:
date {
match => [ "DeviceDate", "TIMESTAMP_ISO8601"]
target => "@timestamp "
}
however i get below error on :
Cannot create pipeline { :reason=>"Illegal pattern component: T"}
Any clue how to fix this?
Badger
June 21, 2018, 5:57pm
2
It's falling over at the first T in TIMESTAMP_ISO8601. You could change that to
match => [ "DeviceDate", "ISO8601"]
Which would run, but return a date parse failure. Try
match => [ "DeviceDate", "yyyy-MM-dd HH:mm:ssZ"]
system
(system)
Closed
July 19, 2018, 5:57pm
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.