Intermediate 1
This commit is contained in:
@@ -18,7 +18,8 @@
|
||||
<Match field="Text" value="%{SYSLOGLINE}" />
|
||||
</Grok>
|
||||
<Mutate>
|
||||
<Rename oldName="timestamp" newName="xtimestamp"/>
|
||||
<Rename oldName="timestamp" newName="xtimestamp"/>
|
||||
<Remove field="foo%{Index}" />
|
||||
</Mutate>
|
||||
<Date field="timestamp" target="@timestamp" convertToUTC="true">
|
||||
<Pattern>MMM d HH:mm:ss</Pattern>
|
||||
|
||||
Reference in New Issue
Block a user