Why is my timefield entry and @timestamp are different?

Elastic Stack Logstash
1

Hi, I have a timefield in log entry and I have targetted it to @timestamp in Logstash, but they appear different. For example;

time entry in log => 2017-05-15T10:14:58.992Z
@timestamp => 2017-05-15T10:30:56.015Z

below is my date filter;

date {
	match => [ "timestamp", "dd-MM-yyyy HH:mm:ss.SSS aa" ]
	timezone => "UTC"
	target => "@timestamp"
}

Somebody kindly help me to fix this. Thank in advance.

2

The pattern in your date filter clearly doesn't match what seems to be in your timestamp filter. You should be able to use the "ISO8601" pattern here.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.