I have 3 datetime string fileds, and i want to parse them by date filter and make the last one as the @timestamp of the doc date { match => ["syslog.timestamp", "MMM dd HH:mm:ss"] target => "syslog.timestamp" } date { match => ["skyeye.timestamp", "yyyy-MM-dd HH:mm:ss"] targ…

How to refer to an object's sub field in a filter

system (system) Closed September 21, 2018, 1:36am 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Date filter can't read from fieldnames which contain dots (created by the JSON filter) Logstash	3	722	May 14, 2020
Correct way to access nested fields in logstash filters Logstash	3	1696	June 20, 2018
How to refer to subfield in logstash Logstash	3	6747	April 19, 2017
Does the data input filter work on nested fields? Logstash	3	2089	July 6, 2017
Cannot get date to match timestamp after xml parsing Logstash	3	768	July 6, 2017