Hi Florent, the pattern you're using is wrong (single 'M' instead of 'MMM'). See http://docs.graylog.org/en/2.1/pages/extractors.html#the-standard-date-converter for examples and https://docs.oracle.com/javase/8/docs/api/java/text/SimpleDateFormat.html for a reference of the date format patterns.
You could also try using a flexible date converter: http://docs.graylog.org/en/2.1/pages/extractors.html#the-flexible-date-converter Cheers, Jochen On Wednesday, 28 September 2016 17:51:27 UTC+2, Florent B wrote: > > Hi everyone, > > I have an extractor on an input to handle logs sent by Apache webserver. > > When I match the date field, sent by Apache like this : > "28/Sep/2016:17:25:55 +0200", Graylog fails to convert it : > > java.lang.IllegalArgumentException: Invalid format: > "28/Sep/2016:17:31:02 +0200" is malformed at "Sep/2016:17:31:02 +0200" > > I have configured format the date uses like "d/M/y:H:m:s Z". > > What did I miss ? > > Thank you. > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ff9af773-4ebc-4267-b76d-f0f75e32183b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
