Hi,
I want to customize the key names like @timestamp. Because there is a problem with Logstash Parser and @timestamp => logstash-plugins/logstash-filter-date#95
My workaround in the logstash parser:
mutate { copy => { "@timestamp" => "timestamp_modified" } } mutate { convert => { "timestamp_modified" => "string" } } date { match => [ "timestamp_modified", "ISO8601" ] tag_on_failure => "_dateparsefailure" add_tag => [ "date_replaced" ] }
The keys are hard coded in
|
public class EcsJsonSerializer { |
Best
Niklas
Hi,
I want to customize the key names like @timestamp. Because there is a problem with Logstash Parser and @timestamp => logstash-plugins/logstash-filter-date#95
My workaround in the logstash parser:
mutate { copy => { "@timestamp" => "timestamp_modified" } } mutate { convert => { "timestamp_modified" => "string" } } date { match => [ "timestamp_modified", "ISO8601" ] tag_on_failure => "_dateparsefailure" add_tag => [ "date_replaced" ] }The keys are hard coded in
ecs-logging-java/ecs-logging-core/src/main/java/co/elastic/logging/EcsJsonSerializer.java
Line 34 in 7dbf50e
Best
Niklas