my nginx log timestamp like this:
20190425T092956Z
but use date plug-in can't deal !
logstash code:
date { match => ["timestamp", "ISO8601","yyyyMMddHHmmssZ"] }
IN kibana show @timestamp no change
logstash version 6.6.1
my nginx log timestamp like this:
20190425T092956Z
but use date plug-in can't deal !
logstash code:
date { match => ["timestamp", "ISO8601","yyyyMMddHHmmssZ"] }
IN kibana show @timestamp no change
logstash version 6.6.1
date { match => ["timestamp", "yyyyMMdd'T'HHmmss'Z'"] }
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.