How to split a pure string like YYYYMMDDHHmm and convert into timestamp?

You can use the date filter, like e.g.

filter {
    date {
        match => ["old_field","YYYYMMDDHHmm"]
        target => "new_field"
    }
}
1 Like