Time/Date logic in logstash conf

Can I do any timestamp/date logic in the logstash configuration to make logstash have a cutoff date so it only sends events that happened after a certain date?

Something like this:
if [@timestamp] > "2017-02-01T00:00:00.000Z" {

Some data comes in with UNIX timestamps so those I could just do normal math on but other data comes in with human readable timestamps and there I would need to be able to do something like the above...



Should I be submitting this as a feature request?

Logically the date plugin might be the right place with the right capabilities to handle this....

Sounds like a great FR! :slight_smile:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.