Mongodb filebeat parsed timestamp is wrong

[piotrrybicki]

Hi All.

I recently tried to start mongodb filebeat plugin (v 6.3.2)

To my surprise, all parsed logs appears as from Jan this year (day is correct).

json doc stored in ES (anonymized)

{
"_index": "filebeat-mongodb-log-6.3.2-2018.08.13",
"_type": "doc",
"_id": "jz_pMmUBbSk-ag5Bud9u",
"_version": 1,
"_score": null,
"_source": {
"offset": 125734985,
"prospector": {
"type": "log"
},
"read_timestamp": "2018-08-13T10:51:38.085Z",
"source": "/var/log/mongodb/mongod.log",
"fileset": {
"module": "mongodb",
"name": "log"
},
"input": {
"type": "log"
},
"@timestamp": "2018-01-13T10:51:37.575Z",
"beat": {
"hostname": "xxx",
"name": "xxx",
"version": "6.3.2"
},
"host": {
"name": "xxx"
},
"mongodb": {
"log": {
"severity": "I",
"component": "xxx",
"context": "xxx",
"message": "xxx"
}
}
},
"fields": {
"@timestamp": [
"2018-01-13T10:51:37.575Z"
]
},
"sort": [
1515840697575
]
}

And a log line looks like (anonymized):

2018-08-13T11:54:11.537+0000 I XX YYY