EventTime as Dashboard Timepicker Field - No Results

[cdienger]

The field is expecting and working with strings as mcapra suggested. Add the following filtering under Administration > Global Configuration > Filters:

Code: Select all

if [type] == 'eventlog'{
date {
match=> ["EventTime", "YYYY-MM-dd HH:mm:ss"]
target => 'event_time'
}
}

This will create a new date field called event_time that you can then use.