logstash date filter (nginx)

test-nginx-date-parsing

$ logstash -f test.conf


$ echo '{"ts": "03/Sep/2014:16:11:58 +0200", "foo": "bar"}' | nc localhost 2222

test.conf

input {
        tcp {
                port  => 2222
                codec => "json"
         }

}

filter {
        date {
                match  => [ "ts", "dd/MMM/YYYY:HH:mm:ss Z" ]
                locale => "en"
        }
}

output {
        stdout { codec => "json" }
}