Gabriel C
07/24/2023, 7:22 PMparse = {
id = "parser-in-http"
type = "json"
timeKey = "timestamp"
keepTimeKey = true
logLevel = "debug"
estimateCurrentEvent = true
timeFormat = "%iso8601"
}
Result (time format was moved to time_type):
<parse>
@id parser-in-http
@log_level debug
@type json
estimate_current_event true
keep_timeout true
time_key timestamp
time_type %iso8601
</parse>Gabriel C
07/25/2023, 12:22 PM