{
"timestamp" => "2018-04-09 15:33:45.294",
"@version" => "1",
"@timestamp" => 2018-04-09T08:19:32.987Z,
"tags" => [
[0] "_dateparsefailure"
],
"message" => "[2018-04-09 15:33:45.294]\r",
"host" => "BIH-D-6331"
}
input {
stdin { }
}
filter {
grok{
match => [
"message","[%{TIMESTAMP_ISO8601:timestamp}]"
]
}
date {
match => [ "timestamp", "yyyy-MM-dd HH:mm:ss,SSS Z" ]
target => "@timestamp"
}
}
output {
elasticsearch {
hosts => localhost
index => "logstash(%{+yyyy.MM.dd})"
document_type =>"logstash"
}
stdout {
codec => rubydebug
}
}