Preserve logs original creation sequence when timestamp is identical

Elastic Stack Logstash
1

Hi, I have logs with similar timestamp out of order: I understand logstash does not preserve creation order.
I read that using dissect filter together with grok could solve the issue but can't find any examples.
This is my current setup:

`if "GW" in [log][file][path] {`
`    mutate { add_tag => "devices" }`
`    date {`
`        match => [ "datetime" ,"yyyy-MM-dd HH:mm:ss.SSSSSS" ]`
`        timezone => "GMT"`
`        target => "@timestamp"`
`    }`
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.