Intermediate 1

This commit is contained in:
Eric Fontana
2014-07-23 06:57:10 -04:00
parent 5020186bd2
commit 508ea875ab
3 changed files with 79 additions and 18 deletions

View File

@@ -18,7 +18,8 @@
<Match field="Text" value="%{SYSLOGLINE}" />
</Grok>
<Mutate>
<Rename oldName="timestamp" newName="xtimestamp"/>
<Rename oldName="timestamp" newName="xtimestamp"/>
<Remove field="foo%{Index}" />
</Mutate>
<Date field="timestamp" target="@timestamp" convertToUTC="true">
<Pattern>MMM d HH:mm:ss</Pattern>