HAproxy dateparse issue fixed
@@ -116,13 +116,6 @@ filter {
}
}
}
- }
-
- if [messagenosyslog] {
- mutate {
- remove_field => [ "messagenosyslog" ]
- }
- }
# Set the timestamp from the log to @timestamp, example: 15/Apr/2018:19:22:31 +0000
date {
@@ -130,6 +123,13 @@ filter {
target => "@timestamp"
timezone => "Etc/UTC"
}
+ }
+
+ if [messagenosyslog] {
+ mutate {
+ remove_field => [ "messagenosyslog" ]
+ }
+ }
# When IPv6 is enabled on your HAProxy host, IPV4 addresses are reported like ::ffff:ipv4address. Here we cut off the ::ffff: part
if "ffff" in [source][ip] {
