Logstash 설정

logstash appender - timezone Asia/Seoul

        <appender name="LOGSTASH" class="net.logstash.logback.appender.LogstashTcpSocketAppender">
            <destination></destination>
            <encoder class="net.logstash.logback.encoder.LogstashEncoder">
                <customFields>{"foo":"bar"}</customFields>
                <timeZone>Asia/Seoul</timeZone>
                <timestampPattern>yyyy-MM-dd'T'HH:mm:ss.SSS</timestampPattern>
                <fieldNames>
                    <timestamp>timestamp</timestamp>
                    <stackTrace>exception</stackTrace>
                </fieldNames>
            </encoder>
        </appender>

filter date 설정

filter {
  date {
    match => ["timestamp" , "yyyy-MM-dd'T'HH:mm:ss.SSS"]
    target => "@timestamp"
  }
  mutate {
    remove_field => [ "timestamp" ]
  }
}