Why does this date filter get a _dateparsefailure?

Elastic Stack Logstash
1

Why does this date filter get a _dateparsefailure?

input { generator { message => 'N' count => 1 } }
output { stdout { codec => rubydebug } }
filter {
  mutate { add_field => { "DateReported" => "1292015 1745" } }
  date { match => [ "DateReported", "Mddyyyy HHmm" ] }
}

I am getting to the point where I am considering a ruby filter to rjust it.

2

Anything in the log?

3

No. I'm wondering if M is consuming the 12, leaving dd to not match 9.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.