You can convert it to a timestamp using
date { match => [ "timeStamp", "UNIX" ] }
If instead you want it as a string in a particular format you could do that too.
You can convert it to a timestamp using
date { match => [ "timeStamp", "UNIX" ] }
If instead you want it as a string in a particular format you could do that too.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.