Timestamp shifting problem

Elastic Stack Logstash
1

Hello,
I'm using these lines in my logstash.conf to configure the timestamp.

 grok {
   match => { "message" =>"%{TIMESTAMP_ISO8601:timestamp}\s ..." }
        }
 date {
      match => [ "timestamp", "YYYY-mm-dd HH:MM:ss,SSS" ]
      target => "@timestamp"
    }

However, as you can see in the picture below, there is a shift between the timestamp that I created and the @timestamp in kibana. I couldn't figure out why. Does anyone has an idea to how to fix this?
pic

2

You have MM and mm the wrong way around, so your minutes are always 9 (September).

1 Like
3

Thank you so much, that solved it :grinning:

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.