Logstash S3 output prefix - Event field timestamp

How to set Logstash S3 output prefix dynamically with an event field value in format: "%{+YYYY}/%{+MM}/%{+dd}/%{+HH}" ?


required s3 prefix: 

The output sprintfs the prefix, so you can use

prefix => "%{+YYYY}/%{+MM}/%{+dd}/%{+HH}"

But this is taking @timestamp value I believe. But I want to use record_time field value from event.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.