From fed669d3c21670631b27aff352fe41b1323e9268 Mon Sep 17 00:00:00 2001 From: Kent Wang Date: Thu, 29 Aug 2019 20:48:18 +0800 Subject: [PATCH] Fix filebeat kafka module ingest timezone (#13368) Continuation of #13308 --- filebeat/module/kafka/log/ingest/pipeline.json | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/filebeat/module/kafka/log/ingest/pipeline.json b/filebeat/module/kafka/log/ingest/pipeline.json index 00e98580e65..0c6e44d39ca 100644 --- a/filebeat/module/kafka/log/ingest/pipeline.json +++ b/filebeat/module/kafka/log/ingest/pipeline.json @@ -68,11 +68,12 @@ { "date": { "if": "ctx.event.timezone != null", - "field": "@timestamp", - "formats": ["ISO8601"], + "field": "kafka.log.timestamp", + "target_field": "@timestamp", + "formats": ["yyyy-MM-dd HH:mm:ss,SSS"], "timezone": "{{ event.timezone }}", - "on_failure": [{"append": {"field": "error.message", "value": "{{ _ingest.on_failure_message }}"}}] - } + "on_failure": [{"append": {"field": "error.message", "value": "{{ _ingest.on_failure_message }}"}}] + } }, {"remove": {"field": "kafka.log.timestamp" }} ],