Why is my timefield entry and @timestamp are different?

Hi, I have a timefield in log entry and I have targetted it to @timestamp in Logstash, but they appear different. For example;

time entry in log => 2017-05-15T10:14:58.992Z
@timestamp => 2017-05-15T10:30:56.015Z

below is my date filter;

date {
	match => [ "timestamp", "dd-MM-yyyy HH:mm:ss.SSS aa" ]
	timezone => "UTC"
	target => "@timestamp"

Somebody kindly help me to fix this. Thank in advance.

The pattern in your date filter clearly doesn't match what seems to be in your timestamp filter. You should be able to use the "ISO8601" pattern here.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.