From f5df8aa92214ec14dc87970aa55124045f7915b2 Mon Sep 17 00:00:00 2001
From: ycz008 <yangchengzi@seethingx.com>
Date: Thu, 22 Feb 2024 18:08:07 +0800
Subject: [PATCH] update logstash filter

---
 dev-upgrade/elastic/logstash-ngx.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dev-upgrade/elastic/logstash-ngx.yaml b/dev-upgrade/elastic/logstash-ngx.yaml
index 06d9863..3e586a5 100644
--- a/dev-upgrade/elastic/logstash-ngx.yaml
+++ b/dev-upgrade/elastic/logstash-ngx.yaml
@@ -11,6 +11,10 @@ data:
     }
 
     filter {
+      date {
+        match => [ "start_time", "dd/MMM/yyyy:HH:mm:ss Z" ]
+        target => "@timestamp"
+      }
       mutate {
         add_field => { "env" => "%{[tags][0]}" }
         remove_field => [ "tags" ]