From ab106e9671c19ea858af38d5a387e443c040330f Mon Sep 17 00:00:00 2001
From: berglh <berglh@gmail.com>
Date: Wed, 13 Jan 2016 14:18:16 +1000
Subject: [PATCH 1/2] Adding the 8061 date format which was referenced in L65
 comment but not actually implemented

---
 patterns/grok-patterns | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/patterns/grok-patterns b/patterns/grok-patterns
index 09dc224e..4073a790 100644
--- a/patterns/grok-patterns
+++ b/patterns/grok-patterns
@@ -65,10 +65,11 @@ TIME (?!<[0-9])%{HOUR}:%{MINUTE}(?::%{SECOND})(?![0-9])
 # datestamp is YYYY/MM/DD-HH:MM:SS.UUUU (or something like it)
 DATE_US %{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}
 DATE_EU %{MONTHDAY}[./-]%{MONTHNUM}[./-]%{YEAR}
+DATE_8061 %{YEAR}[./-]%{MONTHDAY}[./-]%{MONTHNUM}
 ISO8601_TIMEZONE (?:Z|[+-]%{HOUR}(?::?%{MINUTE}))
 ISO8601_SECOND (?:%{SECOND}|60)
 TIMESTAMP_ISO8601 %{YEAR}-%{MONTHNUM}-%{MONTHDAY}[T ]%{HOUR}:?%{MINUTE}(?::?%{SECOND})?%{ISO8601_TIMEZONE}?
-DATE %{DATE_US}|%{DATE_EU}
+DATE %{DATE_US}|%{DATE_EU}|%{DATE_8061}
 DATESTAMP %{DATE}[- ]%{TIME}
 TZ (?:[PMCE][SD]T|UTC)
 DATESTAMP_RFC822 %{DAY} %{MONTH} %{MONTHDAY} %{YEAR} %{TIME} %{TZ}

From 76ccaa0d0049db27ab2e5e043ba8b9b3adc9b6d4 Mon Sep 17 00:00:00 2001
From: Berg Lloyd-Haig <berglh@gmail.com>
Date: Wed, 13 Jan 2016 14:40:22 +1000
Subject: [PATCH 2/2] Updating the date format correctly

Woops, wrong way around
---
 patterns/grok-patterns | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/patterns/grok-patterns b/patterns/grok-patterns
index 4073a790..35ca8b64 100644
--- a/patterns/grok-patterns
+++ b/patterns/grok-patterns
@@ -65,7 +65,7 @@ TIME (?!<[0-9])%{HOUR}:%{MINUTE}(?::%{SECOND})(?![0-9])
 # datestamp is YYYY/MM/DD-HH:MM:SS.UUUU (or something like it)
 DATE_US %{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}
 DATE_EU %{MONTHDAY}[./-]%{MONTHNUM}[./-]%{YEAR}
-DATE_8061 %{YEAR}[./-]%{MONTHDAY}[./-]%{MONTHNUM}
+DATE_8061 %{YEAR}[./-]%{MONTHNUM}[./-]%{MONTHDAY}
 ISO8601_TIMEZONE (?:Z|[+-]%{HOUR}(?::?%{MINUTE}))
 ISO8601_SECOND (?:%{SECOND}|60)
 TIMESTAMP_ISO8601 %{YEAR}-%{MONTHNUM}-%{MONTHDAY}[T ]%{HOUR}:?%{MINUTE}(?::?%{SECOND})?%{ISO8601_TIMEZONE}?