Using my own date field instead of using the default timestamp in index creation

hello, i want to use the date in column named time in my csv file instead of timestamp when creating index,i indexed a csv file containing multiple columns, among the columns there is a date field in Y-m-d H:M:S format, when i try to use logstash -f it give me _dateparsefaillure, an example of csv date column is: 2019-12-31 15:22:12, the problem is that i cant use that field instead of timpstamp in order to generate graphical charts and always in kibana the type of the field is sting not date , in logstash i use

date {
match => ["time", "yyyy-MM-dd HH:mm:ss" ]
target => @timestamp
thank you

Can you show us the value of the field you want to parse in kibana, copied from the JSON tab on an expanded event in Discover?

Field names are case sensitive. [time] and [Time] are different fields.

i use the same name in my conf and in csv just in comment i wrote it with 'T' i checked it s the same name

Please show your logstash configuration.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.