Skip to content

Customize the key names like @timestamp #213

@NFehringVHV

Description

@NFehringVHV

Hi,

I want to customize the key names like @timestamp. Because there is a problem with Logstash Parser and @timestamp => logstash-plugins/logstash-filter-date#95

My workaround in the logstash parser:
mutate { copy => { "@timestamp" => "timestamp_modified" } } mutate { convert => { "timestamp_modified" => "string" } } date { match => [ "timestamp_modified", "ISO8601" ] tag_on_failure => "_dateparsefailure" add_tag => [ "date_replaced" ] }

The keys are hard coded in

Best
Niklas

Metadata

Metadata

Assignees

No one assigned

    Labels

    agent-javacommunityIssues and PRs created by the communitytriageIssues and PRs that need to be triaged

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions