I have created a data field during the pipeline and I am trying to find a way to compare that field to see if it is 30 days old or newer. I am not sure how to do about it however. This is the code I have for creating the date field I am trying to query against. </> date { match …

Welcome @d-ring I know you can compare two dates that are in the same format (eg ISO8601 ) like this: if [date1] <= [date2] { } But as you say, that would require you to create another date field for 30 days ago.. In this post => Adding 1 day to the date something similar is done with a ruby fil…

Discuss the Elastic Stack

Compare Dates in Logstash Pipeline

Elastic Stack Logstash

Badger September 3, 2020, 5:08pm 3

Does this help?

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.