Merging Year and Month together


Hey Guys,
In my CVS the Year and Month are seperated. How do i merge these together so that they both used as the timestamp?

hi @luckyluke

this is more of a question on the ingest/logstash side.

On the logstash side:

Here's an example on how to do this (see the explanation wrt mutate)

If your data is already indexed, you can create a new field in your mapping, and concatenate using the set processor . For that, here's an example on SO as well . You can just reindex with that pipeline you've created