# Modify All Logs Before Giving To Filter

**URL:** https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815
**Category:** Logstash
**Created:** [December 7, 2020, 8:16am UTC](https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815 "2020-12-07T08:16:22Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [December 7, 2020, 7:50pm UTC](https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815/2 "2020-12-07T19:50:48Z")

</div>

There are a couple of ideas [here](https://discuss.elastic.co/t/give-events-without-timestamp-the-timestamp-from-the-last-event/131149/2).

You will need event order preserved so you must set pipeline.workers 1 and, if needed, pipeline.ordered (in 7.10 the default will be OK).

No way do the first two lines get the date from the third line added. I do not think it is possible.

---

_[View the full topic](https://discuss.elastic.co/t/modify-all-logs-before-giving-to-filter/257815)._