0
点赞
收藏
分享

微信扫一扫

使用logstash往es里面导数据时候的日期格式问题

alanwhy 2022-02-13 阅读 66

随手一笔,遇到一个奇葩数据库,日期格式丰富多变,以下记录一种简单的解决方式,格式上可以作为日后的启发。

#注意两个date filter plugin即可
filter {
  date {
      match => ["pzrq","yyyy-MM-dd","yyyy/MM/dd","yyyy.MM.dd","yyyy-M-d","yyyy/M/d","yyyy.M.d"]
      target => "pzrq"
  }
  date {
      match => ["yxqz","yyyy-MM-dd","yyyy/MM/dd","yyyy.MM.dd","yyyy-M-d","yyyy/M/d","yyyy.M.d"]
      target => "yxqz"
  }
  mutate {
    copy => { "id" => "[@metadata][_id]"}
    remove_field => [ "@version","@timestamp"]
  }
}
举报

相关推荐

0 条评论