Hi There,
I have two fields date and time("10/26/20","09:30:53").
My Grok patterns are "%{DATA:date}","%{DATA:time}"
I would like to concatenate these two fields as datetime,
Could you please help me on the same.
Hi There,
I have two fields date and time("10/26/20","09:30:53").
My Grok patterns are "%{DATA:date}","%{DATA:time}"
I would like to concatenate these two fields as datetime,
Could you please help me on the same.
You can use sprintf references
mutate { add_field => { "datetime" => "%{date} %{time}" } }
Thanks @Badger .
I have configured 2 logstash.conf file in pipelines.yml file,
can you please tell me how can I run the pipelines.yml file.
I got struct for more than an hour in this.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.