Assign timestamp value to field in filebeat

Elastic Stack Beats
1

Hello,

Is there a way for me to assign the timestamp value to an add_field? Like for example:

processors:
- add_fields:
    fields:
      collectiontime: "@timestamp"

This example doesn't work because when I check the debug log I see a:

"collectiontime":"@timestamp"

and I really want:

"collectiontime":2022-01-29T05:36:14.656+0530"

ie, the actual time.

or maybe there is a way to call a Linux command, like:

collectiontime: %{date}

where 'date' is the Linux command (I am sure I have the format wrong)

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.