diff --git a/docker/elk/logstash/dist/http_output.conf b/docker/elk/logstash/dist/http_output.conf index 9c1932a1..7d2a4584 100644 --- a/docker/elk/logstash/dist/http_output.conf +++ b/docker/elk/logstash/dist/http_output.conf @@ -598,6 +598,11 @@ filter { # Ipphoney if [type] == "Ipphoney" { + mutate { + gsub => [ + "timestamp", "\+00:00Z$", "+00:00" + ] + } date { match => [ "timestamp", "ISO8601" ] } diff --git a/docker/elk/logstash/dist/logstash.conf b/docker/elk/logstash/dist/logstash.conf index ad23f165..ab74d24a 100644 --- a/docker/elk/logstash/dist/logstash.conf +++ b/docker/elk/logstash/dist/logstash.conf @@ -598,6 +598,11 @@ filter { # Ipphoney if [type] == "Ipphoney" { + mutate { + gsub => [ + "timestamp", "\+00:00Z$", "+00:00" + ] + } date { match => [ "timestamp", "ISO8601" ] }