Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save spaghetti-/0d4be9827f9f68992fe05963edaf784d to your computer and use it in GitHub Desktop.
Save spaghetti-/0d4be9827f9f68992fe05963edaf784d to your computer and use it in GitHub Desktop.
grok to take out timestamp
PUT _ingest/pipeline/extract_timestamp_fromlogfile
{
"processors": [
{
"grok": {
"field": "message",
"patterns": ["%{TIMESTAMP_ISO8601:timestamp}"]
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment