Hello team, I'm trying to add a new field to metricbeat data collection through logstash. The idea is to create a field from the difference between two dates (@timestamp and system.process.cpu.start_date). I've made some test, but the field created in elastic is empty. Here is the logstash config…

[image] stemons: date_start_i = event.get('[process][cpu][start_time]').to_i; That is going to take a string like "2021-03-29T04:24:52.000Z" and .to_i will just pull the leading 2021 from it. You need to parse that using a date filter to convert it to a LogStash::Timestamp (that's what a date…

Discuss the Elastic Stack

Logstash - Difference between date into new field

Elastic Stack Logstash

stemons September 9, 2021, 10:02pm 7

It worked! Thanks a lot

Topic		Replies	Views
Logstash issue Logstash	2	308	March 14, 2023
Duration calculation using date fields Logstash	6	2046	March 22, 2019
Adding duration field from start date and end date Logstash	8	3973	July 6, 2017
【Logstash】 I want to calculate the difference of field value Logstash	2	480	December 4, 2019
Logstash filter issue Logstash	5	229	July 10, 2023

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash - Difference between date into new field

Related topics