# Logstash: формирование @timestamp, используя имя файла лога и данные самого лога (ч. 2)

**URL:** https://discuss.elastic.co/t/logstash-timestamp-2/276144
**Category:** Вопросы на русском языке
**Created:** [June 16, 2021, 1:00pm UTC](https://discuss.elastic.co/t/logstash-timestamp-2/276144 "2021-06-16T13:00:12Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)
#### Post date: [June 16, 2021, 6:38pm UTC](https://discuss.elastic.co/t/logstash-timestamp-2/276144/2 "2021-06-16T18:38:48Z")

</div>

> [@lkfmasd](#):
>
> Есть еще какие-нибудь варианты?

Вот очень похожая ситуация:

> [@Generate @timestamp in-logstash-by-concatenating-date-from-filename-and-time-from-logs](https://discuss.elastic.co/t/generate-timestamp-in-logstash-by-concatenating-date-from-filename-and-time-from-logs/82556):
>
> Hi, I have log file name 'log.20170410.123146.txt' and time in log entry. I want to merge date from filename and time from logs to generate @timestamp in logstash. grok { match =\> ["message", "^(?\<timestamp\_tmp\>\d{4}\d{2}\d{2} \d{2}\:\d{2}\:\d{2})"] match =\> ["path", "^\/var\/logs\/sitecore\/log\.(?\<date\_tmp\>\d{4}\d{2}\d{2})"] } mutate { add\_field =\> {"timestamp" =\> "%{date\_tmp} %{timestamp\_tmp}" } grok { match =\> ["file…

---

_[View the full topic](https://discuss.elastic.co/t/logstash-timestamp-2/276144)._