I Am trying to feed logstash with old tomcat access logs. But I can't get the Date plugin to match timestamp for tomcat access log.
I always get the @timestamp for when the log was sent to logstash. Not when the log was actually written.
Also on http://pastebin.com/a8b0VwnU
sorry... When I tested my config one more time after posting this issue it worked!
I just moved the date plugin under the grok part.
You can remove this issue if you have delete permission for it....