Hi When dealing with Logstash dates, anyone can easily convert a text string date field to a real date (with proper TZ and DST) using date filter: date { timezone => "Europe/Madrid" match => ["mytime", "ISO8601"] locale => "es" } (please, notice timezone (and local…

You can use a ruby filter to read the timestamp value in @timestamp. That object might have a strftime() method that you can use.

Discuss the Elastic Stack

Logstash set hour %{+HH} timezone on strings?

Elastic Stack Logstash

mostolog (mostolog) February 16, 2017, 9:09am 3

Damn it!
Any way to extract HH from @timestamp field (already with TZ and DST?) regex? substring? event['@timestamp][x..y]? Substring in logstash

Regards

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.