Extract timestamp from log message


(Gleb) #1

I get log messages like this one:

Jul 20 14:15:29 ...

and I want to use grok filter (INGEST NODE in ElasticSearch) to extract timestamp (time and date) from this log in format like @timestamp (not string) . It necessary for me because I want to sort logs. Please, write down this filter.
NOTE: This variant does not work:

%{TIMESTAMP_ISO8601:timestamp}

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.