@timestamp should match with aupm_timestamp is not working for me

Elastic Stack Logstash
1

error

3

I had similar issue to this, use the date filter, In your case it will something like this. I am not sure what date format you want to use. This will assign what you want to @timestamp, which is a metadata field value indicating when logstash processed the doc. If you don't specify the timezone it will default to UTC.

    date {
        match => [ "aupm_timestamp", "MMM dd HH:mm:ss" ]
        target => "@timestamp"

    }
4

FOR ME "yyyy-MM-dd HH:mm:ss,SSS" if i put the ,SSS its not even pulling the data to KIBANA

But my log formate is like that 2016-03-10 02:33:38,231

@stecino

5

Head over to https://grokdebug.herokuapp.com and try your pattern out, then you can move it back into the date filter when you know it works.

7

If i remove it ,SSS then ITS WORKING but i cannot see same date in KIBANA @warkolm @stecino

8

The stack assumes UTC by default, so unless you provide a TZ then the data in KB will be altered to suit your browsers TZ.

9

i'm sorry I'm new to this ELK. Can u say how to do that TZ

THANK YOU # I'm really in need can you help me out please
@warkolm

10

anyluck

11

TZ = time zone. Have a read of https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-timezone