I'm trying to back fill catalina.out from Tomcat so I need to overwrite timestamp with the one from the logs. Example message is: [INFO] 2016-04-22 17:50:20,769 [Blah1] [Blah2] ... My filter is: filter { if [type] == "catalina" { grok { match => [ "message", "%{(\d){4}-(\d){2}-(\d){2…

@timestamp not overwriten by date filter

magnusbaeck (Magnus Bäck) May 3, 2016, 11:02am 8

Please show your filter configuration.

Topic		Replies	Views
Get the correct timestamp from the log file Logstash	6	3098	July 6, 2017
Timestamp => @timestamp Logstash	17	4140	June 14, 2017
How to override logstash @timestamp value with my date time field from the logs Logstash	7	8589	February 7, 2017
Logstash date filter not replacing @timestamp field Logstash	4	1271	April 1, 2017
Logstash timestamp issue Logstash	4	526	March 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

@timestamp not overwriten by date filter

Related topics