HI, I am aggragating events for each session from log I fetch the log time from event in aggregate filter, i want to have a field startdatetime and assign session open time to this, set timeout_timestamp_field => "StartDateTime", Then assign this "StartDateTime" to @timestamp first part works …

Assigning an aggregated event timestamp to @timestamp

xyz2 April 29, 2020, 9:57pm 6

Appreciate any help

Topic		Replies	Views
Aggregate filter with timeout_timestamp_field Logstash	3	1412	September 11, 2018
How to replace @timestamp field in logstash aggregate filter map Logstash	2	384	July 9, 2021
Aggregate filter timeout by event timestamp rather than by system time Logstash	1	552	July 6, 2017
Problem using timeout_timestamp_field in the aggregate filter Logstash	3	537	May 16, 2019
How to add timestamp to aggregate filter Logstash	3	388	November 21, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Assigning an aggregated event timestamp to @timestamp

Related topics