Logstash set timestamp from json sub member field

Elastic Stack Logstash
1

Hi,
I have json like this
{system: {time:2017-05-15 12:12:33,version....}...}

I have config for logstash like this

date {
match => ["system.time", "yyyy-MM-dd HH:mm:ss"]
target => "@timestamp"
}

But this is not matching time

Please help me on this.

2

Hay Guys i found it you have to write like this

match => [ "[system_test][test_time]" , "yyyy-MM-dd HH:mm:ss" ]

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.