Formatting Date field


(Varun Patel) #1

I have date field which has default format.

I want to change format of that field to MMM-YYYY. How can I do so ?


(erion) #2

You have to config the date format like your date string.
Change the string format how would you like and match that in logstash.conf. I think is not possible change the config without change the date string.


(Varun Patel) #3

is there any way to do it from Kibana ? If yes then can you please write the steps.


(erion) #4

For that configuration you have to use logstash. The format date is decided by the string. For example if you have a log that timestamp is like [23/Mar/2017:09:45:15 +0100] you can configure that like
date {
match => [ "timestamp", "dd/MMM/YYYY:HH:mm:ss Z" ]
target => "@timestamp"
}.
So if you want to modify that the first step is modify data passed in ES and config it in Logstash.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.