Index CSV Timestamp

Elastic Stack Logstash
1

hello
I want to index some csv files. I want to be indexed with the modification date, not with the date entered in Elastic.
Example
My file has a modification date of 01/23/2022, that is the date that I would like to see in Kibana. not today's date
image

2

Do you have a column with date modification?

3

The file itself doesn't have a date column, I want to index with the system date

image
image827×28 1.34 KB

4 
filter {

  ruby { 
    code => "	event.set('[@metadata][filedate]', File.mtime(event.get('[log][file][path]') ) ) "
  }
  
  mutate {copy => { "[@metadata][filedate]" => "@timestamp"}} 

}
5

image
image806×552 11.8 KB

this is my configuration file

6

Thank you very much, what you sent me worked for me.

you are a guru

7

I have noticed, you are on Windows, change in input/file:
sincedb_path => "NUL"

If something is not possible to achive in LS, there is Ruby always.

Guru? You should see Badger, he is the Jedi, collecting data from galaxies, shifting time, control space and much much more.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.