I tried like that for example:
if [retry_time] == "0" {
mutate {
convert => { "retry_time" => "integer" }
}
} else {
date {
match => ['retry_time', 'UNIX']
target => 'retry_time'
}
}
But not sure if it's ok.
I tried like that for example:
if [retry_time] == "0" {
mutate {
convert => { "retry_time" => "integer" }
}
} else {
date {
match => ['retry_time', 'UNIX']
target => 'retry_time'
}
}
But not sure if it's ok.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.