Keeping a value across events
I have a log file that does not include a timestamp on each event. Rather a timestamp is generated and then one or more events are logged. I am trying to persist that timestamp and reuse it across the subsequent log messages. The logs look something like this: *** Mon Dec 15 17:16:07 GMT 2014 0x11092BA23 waiting 0.049387334 seconds ** Mon Dec 15 17:26:08 GMT 2014 0x11092BA33 waiting 0.000103615 seconds 0x11092BA59 waiting 0.000102342 seconds 0x11092BA50 waiting 0.000858821 seconds Any suggestions on storing that timestamp so that it can be applied on the subsequent messages? -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/fa6866f2-5199-4067-ae33-f0e0c2db7fbe%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: Keeping a value across events
Totally forgot to mention that this is a LogStash question. On Monday, December 15, 2014 12:32:03 PM UTC-6, Pierre Carlson wrote: I have a log file that does not include a timestamp on each event. Rather a timestamp is generated and then one or more events are logged. I am trying to persist that timestamp and reuse it across the subsequent log messages. The logs look something like this: *** Mon Dec 15 17:16:07 GMT 2014 0x11092BA23 waiting 0.049387334 seconds ** Mon Dec 15 17:26:08 GMT 2014 0x11092BA33 waiting 0.000103615 seconds 0x11092BA59 waiting 0.000102342 seconds 0x11092BA50 waiting 0.000858821 seconds Any suggestions on storing that timestamp so that it can be applied on the subsequent messages? -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/6b739df8-b1c7-422f-84df-a6f301a4c25c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: Keeping a value across events
On Monday, December 15, 2014 at 22:18 CET, Pierre Carlson mpc...@gmail.com wrote: Totally forgot to mention that this is a LogStash question. Indeed, and as such https://groups.google.com/forum/#!forum/logstash-users is a better fit. This topic has come up in the past so you may find relevant answers in the archives (the short answer is no, you can't do this without a custom plugin). -- Magnus Bäck| Software Engineer, Development Tools magnus.b...@sonymobile.com | Sony Mobile Communications -- You received this message because you are subscribed to the Google Groups elasticsearch group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20141216073617.GA9662%40seldlx20533.corpusers.net. For more options, visit https://groups.google.com/d/optout.
