如何更改logstash中的日期格式

Question

我有如下日志；

04/12/2020 5:12:56 PM
05/12/2020 6:13:36 AM

我想匹配这些字段，并更改为下面的格式；

2020-12-04 17:12:56
2020-12-04 06:13:36

如何在logstash中执行此操作？

感谢回答

Answer 1

此代码提供

filter {
mutate {
add_field => {"old_time" => "04/12/2020 5:12:56 PM"}
}
ruby {
code => '
time = Time.parse(event.get("old_time")).strftime("%y-%m-%d %H:%M:%S")
event.set("new_time", time)
'
}
mutate {
remove_field => ["host","@timestamp","sequence","message","@version"]
} 
}

该输出

{
"old_time" => "04/12/2020 5:12:56 PM",
"new_time" => "20-12-04 17:12:56"
}