Logstassh is not converting EPOCH to human readable format.

Sample data : "TimeCreated": "\/Date(1493308346140)\/",
----
Filter
----

filter {
if [type == 'eventlog'] {
grok {
match => [ 'TimeCreated', "Date\(%{NUMBER:timestamp}\)" ]
}
date {
match => [ 'timestamp', 'UNIX_MS' ]
}
}

I can see properly sparsed field in kibana
"Date(1493308346140)"

However, it is not converted to timestamp.

Please advise. Logstash version : 5.4.1

Thanks,

Start with the shown filter configuration, especially the grok match for TimeCreated and the date filter's timestamp field, then check the Logstash 5.4.1 behavior for UNIX_MS. Done means the parsed epoch value is converted into the event timestamp and appears as a human-readable time in Kibana.

Written by the indexing model from the issue text.