修改logstash配置
filter {
grok {
match => ["message","%{TIMESTAMP_ISO8601:log.date}"]
}
date {
match => ["log.date", "yyyy-MM-dd HH:mm:ss,SSS"]
target => "@timestamp"
}
}
修改logstash配置
filter {
grok {
match => ["message","%{TIMESTAMP_ISO8601:log.date}"]
}
date {
match => ["log.date", "yyyy-MM-dd HH:mm:ss,SSS"]
target => "@timestamp"
}
}