# Logstash KV filter time field

**URL:** https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183
**Category:** Logstash
**Tags:** elastic-stack-monitoring, elastic-stack-security
**Created:** [July 20, 2021, 3:44pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183 "2021-07-20T15:44:21Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [July 20, 2021, 4:51pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183/2 "2021-07-20T16:51:46Z")

</div>

If your data is not key-value pairs (and it is obviously not) then use grok or dissect to extract the key-value data from the message. See [this](https://discuss.elastic.co/t/parsing-firewall-logs-in-logstash/212786/2) example.

---

_[View the full topic](https://discuss.elastic.co/t/logstash-kv-filter-time-field/279183)._