Can filebeat extract date from log message before sending to outputs like elastic search or kafka?
If the log is in JSON and the timestamp field is named @timestamp, yes. Otherwise, no. Filebeat modules make use of Ingest Node in Elasticsearch for parsing the timestamps.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.