"Failed to parse date field" after change settings

Graylog Central (peer support)
1

In attempts to make the timestamp necessary to me (https://community.graylog.org/t/set-timestamp-with-fraction-of-second/7922/3) i changed mapping for timestamp field in ES:

"timestamp" : {
    "type" : "date",
    "format" : "yyyy-MM-dd HH:mm:ss.SSS||yyyy-MM-dd'T'HH:mm:ss.SSSSSS"
}

and create pipeline for change timestamp.
After you answer i get back default mapping in ES, remove all pipeline, rotate active write index and reboot all graylog nodes.
But GL still get error when i search in that index:

`failed to parse date field [2018-12-10 09:53:19.682] with format [yyyy-MM-dd'T'HH:mm:ss.SSSSSS]`

What can be done to fix this error?

1 Like
2

Anyone can help or have some ideas?

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.