elasticsearch - Logstash无法解析时间戳

Question

无法解析csv中的日期。

Failed parsing date from field {:field=>"@timestamp", :value=>"4/10/2016", :exception=>"Invalid format: \"4/10/2016\"", :config_parsers=>"%m/%d/%y", :config_locale=>"default=en_US", :level=>:warn}

码:

date {
    match => [ "@timestamp", "%m/%d/%y" ]
  }

Answer 1

您的日期格式应为

date {
    match => [ "@timestamp", "MM/dd/YYYY" ]
}

查看 Joda documentation中所有可用的格式