Date extraction from a log file


(mariyana) #1

hi,
I want to extract date from a log file to another field in elastic search that is coming through logstash. My log file is like this

21 May 2018 12:13:32,025 INFO [org.jboss.as.configadmin] (ServerService Thread Pool -- 26) JBAS016200: Activating ConfigAdmin Subsystem

What I want is get the date field extracted using logstash and save it to elastic search. Any help would be appreciable.


(Magnus B├Ąck) #2

Use a grok filter to extract fields (like the timestamp) and use a date filter to parse the timestamp into a standard format.

This is a standard setup for which there are countless examples, though probably not the exact log format you have.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.