We have a server that is currently not forwarding logs for ingesting into elasticsearch. We are about to change that but want to ingest an existing year's worth of logs first. So that we can run time based searches in kibana, we would like the @timestamp to reflect the syslog_timestamp rather than…

Can logstash use syslog time as @timestamp

ropc (Romain Chanu) February 7, 2020, 6:41am 2

Hi @amhulli - I believe we had related topics around this - for example here. The idea would be to use the date filter plugin.

I hope that helps.

Topic		Replies	Views
Date parsing logstash Logstash	5	183	January 30, 2024
Newbie trying to use syslog date and time as timestamp in Logstash Logstash	5	1187	May 5, 2020
Custom timestamp Kibana	4	1585	July 6, 2017
Logstash @timestamp field wrong? Logstash	4	1222	July 6, 2017
Logstash timestamp/time/date problems Logstash	4	1067	April 20, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Can logstash use syslog time as @timestamp

Related topics