I'am working with Elastic search Logstash ,catching updates from orcal data base into elastic search.
My problem ==> how to configure sql_last_value UTC time parameter with orcal time stamp.
This is my configration ====>
input{ jdbc { . . . statement => "select * from cm.ELSAYED WHERE TIMESTAMP > :sql_last_value" } } filter { date { match => [ "TIMESTAMP", "YYYY-MM-dd HH:mm:ss.ssssssssssssss Z" ] target => "TIMESTAMP" timezone => "UTC" } }
oracle time stamp is ==> 08-AUG-16 12.26.03.796000000 PM
sql_last_start is ===> 2016-08-08 14:44:22.037000000 Z