I have created a conf file for Logstash. input { file { path => "/advdata/tmp/Error_Trace_blrhpbl_SC1*.txt" start_position => "beginning" } } filter { date { match => [ "logdate", "YYYY/MM/DD-HH:MM:SS" ] } } output { elasticsearch { hosts => ["localhost:9200"] user => "elastic" passw…

How to overwrite Log time values with @timestamp

Andrew_Cholakian1 (Andrew Cholakian) November 21, 2016, 4:59pm 2

You will first need to parse out the logdate field, which it looks like is not done correctly. You'll need to use the grok filter to parse your message first.

Topic		Replies	Views
How to replace @timestamp to the log files mentioned date? Logstash	5	794	April 11, 2019
Can't replace real log time with @timestamp Logstash	6	1033	August 8, 2019
Replacing @timestamp with actual logtime Logstash	6	331	August 26, 2019
Logstash date filter not replacing @timestamp field Logstash	4	1272	April 1, 2017
From Logdate generate @timestamp Logstash	3	376	April 18, 2018

How to overwrite Log time values with @timestamp

Related topics