title: How to get TimeStamp using logstash from Json file? There multiple date fields in the JSON
body: <p>I have my JSON input as follows which has date field and need to extract the date time field from Json,</p>
  
  <pre><code>{
    "Properties": {
           "Client Name": "Chubb",
           "Portfolio": "Chubb-Transfer"
    },
  "Capture": [
           {
              "CaptureGUID": "caa1f5ba-1e93-4926-b3ac-e30d0d9d4cbb",
              "HTMLPath": "Captures\\C:\\",
              "ScreenName": "Amdocs CRM - ClearCallCenter - [Console]",
              "TimeStamp": "20170926110036"
            },
           {
              "CaptureGUID": "0faf6b54-999f-4bfd-b8d0-e81a589f9185",
              "HTMLPath": "Captures\\C:\\",
              "ScreenName": "Microsoft Excel - 1.0.1 1.0.6 1.0.8 Match 3.0.6 Hit NAIC Optimized.xlsx",
              "TimeStamp": "20170926105418"
            }
       ]
  }
  </code></pre>
  
  <p>and My Logstash Config is as below, how to convert the string date ("TimeStamp": "20170926105418") to date format.Have updated with full Logstash file</p>
  
  <pre><code>input {
      file { 
          type =&gt; "json"
          path =&gt; "C:/ELK/data/Recordings/*.json"
          start_position =&gt; beginning
          codec =&gt; multiline {
             pattern =&gt; "^{"
             negate =&gt; "true"
             what =&gt; "previous"
             multiline_tag =&gt; "multi_tagged"
             max_lines =&gt; 30000
         }
      }
  }
  filter{
      date {
          match =&gt; ["Capture.TimeStamp", "yyyyMMddHHmmss"]
          target =&gt; "TimeStamp"
      }
  
      mutate { 
      replace =&gt; { "message" =&gt; "%{message}}" }
      gsub =&gt; [ 'message','\n','']
      }
  
      json { 
          source =&gt; "message" 
          remove_field =&gt; ["message"]
      }
  
  
  }
  
  output {
      elasticsearch {
      index =&gt; "test10"
      }
      stdout { codec =&gt; rubydebug }
  }
  </code></pre>