Skip to content

Instantly share code, notes, and snippets.

@cdenneen
Created August 6, 2013 20:28
Show Gist options
  • Save cdenneen/6168293 to your computer and use it in GitHub Desktop.
Save cdenneen/6168293 to your computer and use it in GitHub Desktop.
multiline {
pattern => "\d\d\/\d\d\/\d\d\d\d \d\d\:\d\d\:\d\d\.\d\d\*"
add_tag => [ "extra_line" ]
what => previous
}
date {
tags => [ "extra_line" ]
match => [ "datetime", "MM/dd/YYYY HH:mm:ss.SS*" ]
}
date {
exclude_tags => [ "extra_line" ]
match => [ "datetime", "MM/dd/YYYY HH:mm:ss.SS" ]
}
@cdenneen
Copy link
Author

cdenneen commented Aug 6, 2013

Failed parsing date from field {:field=>"datetime", :value=>"08/06/2013 14:50:19.94", :exception=>java.lang.IllegalArgumentException: Invalid format: "08/06/2013 14:50:19.94" is too short, :level=>:warn}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment