logstash处理@timestamp时区

input { stdin { } }
filter {
#ruby {
#    code => "event.set('timestamp', event.get('@timestamp') + 8*60*60)" 
#    code => "event.set('aaa', event.get('@timestamp').time.localtime)"
#    code => "event.set('bbb', event.timestamp.time.localtime + 8*60*60)"
#    code => "event.set('ccc', event.timestamp.time.localtime.strftime('%Y-%m-%d'))"
#    code => "event.set('eee', event.timestamp.time.localtime.strftime('%Y-%m-%d %H:%M:%S'))"
#}
#ruby { 
#    code => "event.set('timestamp', (event.get('@timestamp').time.localtime + 8*60*60).strftime('%Y.%m.%d'))"    
#}

#ruby { code => "event.set('bbb', event.timestamp.time.localtime + 8*60*60)" }
#ruby { code => "event.set('ccc', event.timestamp.time.localtime.strftime('%Y-%m-%d'))" }
#ruby { code => "event.set('eee', event.timestamp.time.localtime.strftime('%Y-%m-%d %H:%M:%S'))" }

ruby { 
code => "event.set('timestamp', event.get('@timestamp').time.localtime + 8*60*60)" 
}

ruby{
code => "event.set('day', (event.get('@timestamp').time.localtime + 8*60*60).strftime('%Y.%m.%d'))"
}
}
output {
stdout { codec=> rubydebug }
}

 

posted @ 2017-03-13 15:34  duanxuan  阅读(11499)  评论(1编辑  收藏  举报