Timestamp problem

Elastic Stack Logstash
1

I got date saved as a string:"1538644629000". I need it to be saved as a timestamp so it can be used in Kibana. I have tried everything (I think):

date{
match => ["temp_date", "yyyy-MM-dd'T'HH:mm:ss'.'SSS'Z'"]
target => "temp_date"
}

And it doesn't work (RHEL 6), and temp_date field still contains old 13 character value. I have tried adding timezone, also no success. Strange thing is, this works on Windows (yes, also tried on RHEL, doesn't work) when I use:

date{
match => ["temp_date", "yyyy-MM-dd HH:mm:ss"] <--no T, no SSS, no Z
target => "temp_date"
}

Any ideas?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.