Aggregate fields based on nested filter with custom separator

[fbaligand (Fabien Baligand)]

All you can do with "sprintf" is explained here :
https://www.elastic.co/guide/en/logstash/5.5/event-dependent-configuration.html#sprintf

There is especially a link to detail all "time format" possibilities.