Logstash - change existing date format


#1

I need to change the date format in logstash from field "DATE" -> 10/21/2017 5:26:42 PM to 2017-10-21T17:26:42.000Z. I don't mean to just change the mapping in that field (which I did) but to change existing data.

Date filter plugin doesn't seem to help: https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-remove_field

Might you have an idea how to do it?

I am using ELK stack ver. 5.1


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.