I would like to concatenate date and time fields with logstash

Hi There,

I have two fields date and time("10/26/20","09:30:53").
My Grok patterns are "%{DATA:date}","%{DATA:time}"

I would like to concatenate these two fields as datetime,
Could you please help me on the same.

You can use sprintf references

mutate { add_field => { "datetime" => "%{date} %{time}" } }
1 Like

Thanks @Badger .

I have configured 2 logstash.conf file in pipelines.yml file,
can you please tell me how can I run the pipelines.yml file.
I got struct for more than an hour in this.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.