- update tutorials to use new date 'match' syntax instead of the older

deprecated one
This commit is contained in:
Jordan Sissel 2013-01-16 23:30:21 -08:00
parent 81e6952130
commit dc3f46bd74
2 changed files with 2 additions and 2 deletions

View file

@ -21,7 +21,7 @@ filter {
type => "apache"
# Try to pull the timestamp from the 'timestamp' field (parsed above with
# grok). The apache time format looks like: "18/Aug/2011:05:44:34 -0700"
timestamp => "dd/MMM/yyyy:HH:mm:ss Z"
match => [ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z" ]
}
}

View file

@ -21,7 +21,7 @@ filter {
type => "apache"
# Try to pull the timestamp from the 'timestamp' field (parsed above with
# grok). The apache time format looks like: "18/Aug/2011:05:44:34 -0700"
timestamp => "dd/MMM/yyyy:HH:mm:ss Z"
match => [ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z" ]
}
}