If you are using logstash to push your events do ES you need something like
this:
date {
match => [ "<field_with_the_epoch>", "UNIX" ]
}
Read more about it here: http://logstash.net/docs/1.4.2/filters/date
On Tuesday, October 21, 2014 8:43:08 AM UTC-3, ES USER wrote:
>
> For the life of me my Google searching has not revealed any solution to
> this at least none that work for me. I have log data with an Epoch
> timestamp in it and would like to use the date filter in Logstash to
> overwrite @timestamp with the appropriate converted timestamp derived from
> that epoch. Any insight on this would be much appreciated.
>
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to elasticsearch+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/ee39dee4-b113-4fcf-80d6-4d4e7063afc9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
