What is the cleanest way to match log lines that contain timestamps in this format [20170324, 00:43:07.637] into @timestamp?
thank you
Use a grok filter to extract the timestamp part of the string into a separate field, then use a date filter with a pattern like YYYYMMdd, HH:mm:ss.SSS to parse the string into @timestamp.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.