Exact HOUR from date type field


(Kyunam Kim) #1

I have a date field like this - "orig_dt" => "2008-09-20 17:51:00",
How do I extract HOUR (=17) from it?

Thanks!


(Magnus B├Ąck) #2

The grok filter would be a good choice.


(Kyunam Kim) #3

yeah, I tried grok filter before posting and I was hoping that someone would show how to configure a grok filter to parse HOUR.

Thanks!


(system) #4