date filter adding tag even if match fails and @timestamp not updated

Description

Logstash is adding the dated tag so, according to the docs, the date filter succeeded. Yet, @timestamp is still ms-resolution and clearly has not been updated from timestamp when we see logstash catch up on old log items.

Config in client:

Example record sent to output:

Activity

Show:
Philippe Weber
April 8, 2014, 4:47 AM

You current date pattern cannot match your date, you need to add another option like (pay attention to the double space before the single d)

Please confirm it fixes your timestamp parsing issue.

The remaining fact that the event is tagged even when the parsing fails seems wrong, I will have a deeper look in the code and tests.

Garth Kidd
April 9, 2014, 12:28 AM

Confirmed. Thanks!

j
April 9, 2014, 12:56 AM

Thanks Garth - I'll update the book example too.

Philippe Weber
April 10, 2014, 5:05 AM
Jason Kendall
April 17, 2014, 6:25 PM

PR Merged, Closing

Assignee

Philippe Weber

Reporter

Garth Kidd

Labels

Fix versions

Affects versions

Configure