Hi When dealing with Logstash dates, anyone can easily convert a text string date field to a real date (with proper TZ and DST) using date filter: date { timezone => "Europe/Madrid" match => ["mytime", "ISO8601"] locale => "es" } (please, notice timezone (and local…

You can use a ruby filter to read the timestamp value in @timestamp. That object might have a strftime() method that you can use.

Discuss the Elastic Stack

Logstash set hour %{+HH} timezone on strings?

Elastic Stack Logstash

mostolog (mostolog) February 16, 2017, 9:09am 3

Damn it!
Any way to extract HH from @timestamp field (already with TZ and DST?) regex? substring? event['@timestamp][x..y]? Substring in logstash

Regards

Topic		Replies	Views
Timestamp question Logstash	3	569	July 6, 2017
Timestamp field with local timezone! Logstash	4	2496	January 14, 2019
Ruby time.strftime Stripping hours from the time Logstash	4	938	October 6, 2021
Timezone logstash date filter Logstash	5	4866	September 16, 2021
How can I change the @timestamp match my timestamp? Logstash	3	735	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash set hour %{+HH} timezone on strings?

Related Topics