Removing string from this form of time stamp

Elastic Stack Logstash
1

This process had the following timestamp.

"2016-07-19 16:02:17"
filter {
date {
match => [ "message", "YYYY-MM-dd HH:mm:ss", "ISO8601" ]
target => "abctime"
}
}

But these have to do with the time stamp?
"2016-07-19 AM 11:04:19"
"2016-07-19 PM 16:02:17"

You can remove the string(AM or PM) and specify a timestamp?

Answers please. thank you.

2

You could use the mutate filter's gsub option to replace the pattern " (AM|PM) " with an empty string.

1 Like