I have a column name Date in which field is 11/11/2018 11:29 i want to extract this vale 11/11/2018 11:29 into new column time in which
time is 11:29 and day is also coming from new column Day
for example 11/11/2018 is sunday
i write this for new column
mutate {
add_field => {"Time" => "%{Date}"}
}
then i write
date {
match => ["time","HH:mm:ss"]
locale => en
timezone => "UTC"
}
but it adds new column time but it shows 11/11/2018 11:29 i want only 11:29 in time. Can someone help me in this really appreciate it..
Also i want a new column day
mutate {
add_field => {"Day" => "%{Date}"}
}
Now the in the day column i want day just drop from the date field 11/11/2018
which is sunday so my day column will show day and my time column show will show the time and date column which is also present showing full date and time.