Unable to parse the date in syslog log message

Elastic Stack Logstash
1

I am trying to parse the data in my Syslog log message using different patterns like %SYSLOGTIMESTAMP:syslog_timestamp} , %{MONTH} +%{MONTHDAY} %{TIME} but am unable to parse the message.

Message I am trying to parse "september 09 09:50:08 "

both the patterns work when I put 'S' in september. But I receive my log as <13> september 09 09:50:08.

Can anyone suggest a way to parse this date format without changing the log message that I receive?

Thanks.

2

You could upgrade to a more recent version, since this was fixed in 2016. Or just use a custom pattern that looks like the current definition.

3

try the following patterngrok%20output

september 09 09:50:08

%{MONTH:month} %{MONTHDAY:day} %{TIME:time}