time - How to change only date in @timestamp using logstash date filter? -
i using date filter. want update date , want keep time is.
i using following date filter:
date{ timezone => "utc" match => [ "my_timestamp", "dd.mm.yy" ] }
but when match date, date matched , time resets zero. there way update date while keeping time is?
help me out
seems odd thing do, but...
grab time @timestamp , date log, merge them add_field, , feed date{}.
certainly can time portion ruby{} filter, , might possible copy @timestamp field mutate->add_field , mutate->gsub{} off date.
Comments
Post a Comment