Hello, I am trying to convert values of all date fields to UTC. I use date filter, which works fine for top level fields. However, looks like it does not work for nested fields like "abc" : [ { "dateField" : "2020-09-11T00:00:00-08:00", } ] I tried date filter like date { match => [ "[abc]…

Convert value of nested date field to UTC with date filter

ptamba June 9, 2020, 2:41am 2

this is not nested but array. if there's only one entry, you should be able to access it with [abc][0][dateField]

if it's arbitrary length, you will need ruby filter to iterate over it.

Topic		Replies	Views
Date getting converted to UTC Logstash	2	445	July 6, 2017
Timestamp question Logstash	3	603	July 6, 2017
Date filter and time zone transition Logstash	2	8933	July 31, 2017
Locale automatically being set in date filter Logstash	10	1297	July 6, 2017
Logstash don't parse Date field properly Logstash	1	423	January 16, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Convert value of nested date field to UTC with date filter

Related topics