Please help - if statement for match rules

Elastic Stack Logstash
1

I would like to match two items with the rule below. How can I make this with an if statement?

  date { 
    match => [ "fgt_timestamp", "yyyyMMdd HHmmss", "yyyy-MM-dd HH:mm:ss" ]  
    target => "std_timestamp" 
    timezone => "Europe/Berlin" 
    add_field => { "debug" => "timestampMatched" } 
  }

I want to match the fgt_timestamp and another one called hht_timestamp also, is this possible?

2

If you need to parse two date fields then you need two date filters.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.