Hi,
I have this sentence, The deployment started 3/19/2019 at 2:05
as a "message"
to logstash
How do I capture the date and time in the above sentence? Also, how should I check to allow this sentence to be parsed and other sentences be ignored. I was thinking something on the lines of:
if [message] =~ /^The deployment started/ {
ruby{
<some code here to parse date and time>
}
}
Any help here is appreciated. Thanks.