Extract date from message

Can filebeat extract date from log message before sending to outputs like elastic search or kafka?

If the log is in JSON and the timestamp field is named @timestamp, yes. Otherwise, no. Filebeat modules make use of Ingest Node in Elasticsearch for parsing the timestamps.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.