Can I do any timestamp/date logic in the logstash configuration to make logstash have a cutoff date so it only sends events that happened after a certain date?
Something like this:
if [@timestamp] > "2017-02-01T00:00:00.000Z" {
}
Some data comes in with UNIX timestamps so those I could just do normal math on but other data comes in with human readable timestamps and there I would need to be able to do something like the above...
Thanks!