File tree Expand file tree Collapse file tree 1 file changed +10
-0
lines changed
docs-source/content/samples/simple/elastic-stack/weblogic-domain Expand file tree Collapse file tree 1 file changed +10
-0
lines changed Original file line number Diff line number Diff line change @@ -120,6 +120,10 @@ data:
120120 format11 / <(?<severity>(.*?))>/
121121 format12 / <(?<messageID>(.*?))>/
122122 format13 / <(?<message>(.*?))>/
123+ # use the timestamp field in the message as the timestamp
124+ # instead of the time the message was actually read
125+ time_key timestamp
126+ keep_time_key true
123127 </parse>
124128 </source>
125129 <match **>
@@ -131,6 +135,12 @@ data:
131135 index_name "#{ENV['DOMAIN_UID']}"
132136 scheme https
133137 ssl_version TLSv1_2
138+ key_name timestamp
139+ types timestamp:time
140+ # inject the @timestamp special field (as type time) into the record
141+ # so you will be able to do time based queries.
142+ # not to be confused with timestamp which is of type string!!!
143+ include_timestamp true
134144 </match>
135145EOF
136146` ` `
You can’t perform that action at this time.
0 commit comments