Exact HOUR from date type field

(Kyunam Kim) #1

I have a date field like this - "orig_dt" => "2008-09-20 17:51:00",
How do I extract HOUR (=17) from it?


(Magnus B├Ąck) #2

The grok filter would be a good choice.

(Kyunam Kim) #3

yeah, I tried grok filter before posting and I was hoping that someone would show how to configure a grok filter to parse HOUR.


(system) #4