Modify @timestamp

Elastic Stack Logstash
1

Hi,

I have a question regarding timestamp. I have a lot of text logs with date and time
I am parsing field %{DATE:date} %{TIME:time} and i get following format:

28.10.2019 14:10:10

Is it possible to put this value to @timestamp?

Thanks

Jan

2

Hi,

I have it solved by this way:

        mutate {
            add_field => {
                "newtimestamp" => "%{date} %{time}"
            }
        }
        date {
            match => ["newtimestamp","dd.MM.yyyy HH:mm:ss"]
            target => "@timestamp"
        }

It works.

Jan

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.