How can i parse the below data and add time stamp for the thread level events

Elastic Stack Logstash
1

I want to parse the logs and add the datetime field value to the thread names.
Below is my input logs:

START the log printing 08/08/19 09:10:06 343

PID|THREAD NAME|CPU UTILIZATION|MEMORY UTILIZATION
7066|DestroyJavaVM|0.0|11.3
7072|Reference Handler|0.0|11.3

Because there are two different events.. i want to grep the date time from first event and append the value to thread level events..

Can anyone help please

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.