I have met some date filter problem, when tried to convert my unix time to seconds.
As my picture, when I input "2903299199" , I except the result is "2061-12-31T23:59:59+00:00 in ISO 8601, however it returned failure.
After trying several times, I guess logstash might have some bug to convert unix time.
Thank you for your information ,
Here is my logstash config
> if([expires_at]){
> ruby {
> code => "event.set('expires_at', event.get('expires_at').to_i * 1000) "
> }
> }
> date{
> match => [ "expires_at","UNIX_MS" ]
> target => "expire_at"
> }
Finally I resolve this by convert the unix time from seconds to micro sseconds
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.