Logstash dissect change datatype to timestamp

Elastic Stack Logstash
1

Hi ,
Is there a way to change the mapping field to timestamp ?

This is my input "Time :2022-11-21 12:01:30.85"

I'm using "dissect > mapping" to map this field, but the output data type is "text" and I want it as a timestamp .

my conf ..

filter {
  dissect {
    mapping => {
      "message" => "Time :%{TIMESTAMP_ISO8601}
    }
  }
}
2

Use a date filter to parse it.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.