Timezone parsing "(DST+01:00)"

Hi, I have a challenge to parsing the timezone in my log. Here is an example of what the date looks like:
2016-09-05 18:50:00(DST+01:00)

However the filter is not working, I am sure I am only missing a small piece of the puzzle, here is the filter:
date {
locale => "en"
match => ["Start Time", "YYYY/MM/dd HH:mm:ss Z", "ISO8601"]
timezone => "Africa/Windhoek"
target => "@timestamp"
add_field => { "debug" => "timestampMatched"}
}

I found the solution thank you:
date {
locale => "en"
match => ["Start Time", "YYYY-MM-dd HH:mm:ss('DST'Z)", "ISO8601"]
timezone => "Africa/Windhoek"
target => "@timestamp"
add_field => { "debug" => "timestampMatched"}
}

1 Like