Filebeat HTTP JSON with epochtime

Elastic Stack Beats
1

Can filebeat be configured to pass epoch time every 15 minutes?

filebeat.inputs:

2

No, unfortunately, it's not possible.

3

Thanks

4

Hello @seefor . The httpjson input will have this functionality in a upcoming release (which release might change over time, just adding that here), adding lots of new features including what you are looking for, the new docs should be available here: HTTP JSON input | Filebeat Reference [7.11] | Elastic

An example for your usecase, if you just want to run a get request (did not test it, so might need some tweaks):

filebeat.inputs:
- type: httpjson
  config_version: 2
  request.url: https://api.ipify.org/?format=json
  request.method: GET
  request.transforms:|
  - set:
        target: url.params.t0
        value: '[[ formatDate (now (parseDuration "-15m")) "UnixDate" ]]'
    - set:
        target: url.params.t1
        value: '[[ formatDate (now) "UnixDate" ]]'

There is lots of other features as well, easier pagination, object splitting, possibility to keep state (like using the timestamp from the last response in the next request etc).

5

WOW, this is going to be fun!
Thank you so much @Marius_Iversen, do you know when that release drop?

There is lots of other features as well, easier pagination, object splitting, possibility to keep state (like using the timestamp from the last response in the next request etc).

O man you read my mind, I was about to ask that next :slight_smile:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.