logstash处理@timestamp时区

input { stdin { } } filter { #ruby { # code => "event.set('timestamp', event.get('@timestamp') + 8*60*60)" # code => "event.set('aaa', event.get('@timestamp').time.localtime)" # code => "event.set('bbb', event.timestamp.time.localtime + 8*60*60)" # code => "event.set('ccc', event.timestamp.time.localtime.strftime('%Y-%m-%d'))" # code => "event.set('eee', event.timestamp.time.localtime.strftime('%Y-%m-%d %H:%M:%S'))" #} #ruby { # code => "event.set('timestamp', (event.get('@timestamp').time.localtime + 8*60*60).strftime('%Y.%m.%d'))" #} #ruby { code => "event.set('bbb', event.timestamp.time.localtime + 8*60*60)" } #ruby { code => "event.set('ccc', event.timestamp.time.localtime.strftime('%Y-%m-%d'))" } #ruby { code => "event.set('eee', event.timestamp.time.localtime.strftime('%Y-%m-%d %H:%M:%S'))" } ruby { code => "event.set('timestamp', event.get('@timestamp').time.localtime + 8*60*60)" } ruby{ code => "event.set('day', (event.get('@timestamp').time.localtime + 8*60*60).strftime('%Y.%m.%d'))" } } output { stdout { codec=> rubydebug } }

 

转载于:https://www.cnblogs.com/duanxuan/p/6543136.html

相关资源：ELK解决8小时的时间误差