Open prehor opened 8 years ago
I have investigated the problem and found a mistake in may configuration - [@metadata][syslog][timezone] does not contains valid zone name for some hosts and it was the root of the problem.
Would it be possible to add information about used timezone to the exception?
If a interpolated string that is not a supported Timezone string we get an exception and a parse failure but it is not reported very well. e.g. Europe/Berlim
.
When I use interpolated variable for timezone I got exception:
Filter configuration:
[@metadata][syslog][timezone] contains "Europe/Prague"
When I use timezone => "Europe/Prague" timestamp is parsed without error.
I'm using Logstash 2.3.2 in Docker.