mutate { gsub => [ "Date", "Z$", "" ] }
date { match => [ "date", ISO8601 ] target => "[@metadata][date]" }
ruby { code => '
t = Time.at(event.get("[@metadata][date]").to_i)
d = DateTime.parse(t.to_s)
event.set("dayOfWeek", d.strftime("%A"))
' }
logstash增加和替换时间
最新推荐文章于 2023-07-12 13:50:44 发布