Update 20-dns-syslog.conf

logstash/conf.d/20-dns-syslog.conf

@@ -8,10 +8,6 @@ input {
 
 filter {  
 
-  date {
-    match => [ "date", "MMM d HH:mm:ss" ]
-  }
-
   if "pihole" in [tags]{
     grok {
       patterns_dir => ["/etc/logstash/patterns/"]
@@ -152,7 +148,9 @@ filter {
       failed_cache_size => 512
       failed_cache_ttl => 900
     }
-
+  date {
+    match => [ "date", "MMM d HH:mm:ss" ]
+  }
 
   }
 }