I have a field called "timeanddate" and I use it as timestamp. date { match => ["timeanddate", "HH:mm:ss MM/dd/yyyy"] target => "@timestamp" } But I want to change the order of the date and put the day first and then the month, how can I achieve this? dd/MM/yyyy

Date, change day and month position

Badger March 3, 2020, 6:28pm 12

The "Time.at(t.to_f).strftime" assumes that t is a LogStash::Timestamp. You need to use a date filter to parse date (and overwrite it) then the ruby filter should work.

1 Like

Format date field as a string?

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.