I have a log file that does not include a timestamp on each event. Rather
a timestamp is generated and then one or more events are logged. I am
trying to persist that timestamp and reuse it across the subsequent log
messages. The logs look something like this:
Mon Dec 15 17:16:07 GMT 2014
0x11092BA23 waiting 0.049387334 seconds
Mon Dec 15 17:26:08 GMT 2014
0x11092BA33 waiting 0.000103615 seconds
0x11092BA59 waiting 0.000102342 seconds
0x11092BA50 waiting 0.000858821 seconds
Any suggestions on storing that timestamp so that it can be applied on the
subsequent messages?
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/fa6866f2-5199-4067-ae33-f0e0c2db7fbe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
Totally forgot to mention that this is a LogStash question.
On Monday, December 15, 2014 12:32:03 PM UTC-6, Pierre Carlson wrote:
I have a log file that does not include a timestamp on each event. Rather
a timestamp is generated and then one or more events are logged. I am
trying to persist that timestamp and reuse it across the subsequent log
messages. The logs look something like this:
Mon Dec 15 17:16:07 GMT 2014
0x11092BA23 waiting 0.049387334 seconds
Mon Dec 15 17:26:08 GMT 2014
0x11092BA33 waiting 0.000103615 seconds
0x11092BA59 waiting 0.000102342 seconds
0x11092BA50 waiting 0.000858821 seconds
Any suggestions on storing that timestamp so that it can be applied on the
subsequent messages?
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/6b739df8-b1c7-422f-84df-a6f301a4c25c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
On Monday, December 15, 2014 at 22:18 CET,
Pierre Carlson mpcarl@gmail.com wrote:
Totally forgot to mention that this is a LogStash question.
Indeed, and as such
https://groups.google.com/forum/#!forum/logstash-users
is a better fit. This topic has come up in the past so
you may find relevant answers in the archives (the short
answer is "no, you can't do this without a custom plugin").
--
Magnus Bäck | Software Engineer, Development Tools
magnus.back@sonymobile.com | Sony Mobile Communications
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20141216073617.GA9662%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.