ElasticSearch 日期赋值

Posted MOSS

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了ElasticSearch 日期赋值相关的知识,希望对你有一定的参考价值。

Nxlog date to elasticsearch

? ?

elasticsearch会自动检测日期类型,"2016-03-31 22:09:42"会当作字符串,"2016-03-31T22:09:42"、"2016-03-31T22:09:42Z"、"2016-03-31T22:09:42+08:00"会当做日期类型

? ?

Nxlog 配置如下

<Input IIS_Logs1>

Module im_file

File "E:\log\webapi\u_ex*.log"

SavePos TRUE

?

Exec if $raw_event =~ /^#/ drop(); ????????????????????????????????

else ????????????????????????????????????????????????????????

{ ????????????????????????????????????????????????????????

w3c->parse_csv(); ????????????????????????????????????????

$EventTime10 = "2016-03-31T14:06:27.159Z";????????

$EventTime11 ="2016-03-31T22:09:42Z";????????

$EventTime12 ="2016-03-31T22:09:42+08:00";????????

$EventTime13 = ($date + "T" + $time+"+08:00"); ????????

$EventTime14 = ($date + "T" + $time+"Z"); ????????

$EventTime15 ="2016-03-31 22:09:42+08:00";????????

$EventTime16 ="2016-03-31Z";????????

$EventTime17 ="2016-03-31T22:09:42+08:00";????????

$SourceName = "IIS";????????????????????????????????????????

}

</Input>

? ?

<Output IIS_out1>

Module om_tcp

Host 127.0.0.1

Port 9999

Exec to_json();

</Output>

? ?

<Route 2>

Path IIS_Logs1 => IIS_out1

</Route>

? ?

日期格式如下,15,16是字符串类型

? ?

技术分享

? ?

以上是关于ElasticSearch 日期赋值的主要内容,如果未能解决你的问题,请参考以下文章

Elastic Search 新手笔记(2)—— 日期格式

Elasticsearch 日期时间处理

Elasticsearch安装和入门教程(转)

Logstash+elasticsearch+elastic+nignx

错误 [内部] 为 docker.elastic.co/elasticsearch/elasticsearch:7.12.0 加载元数据

Elasticsearch:使用 Elastic 机器学习进行 data frame 分析