Hello!
I have gelf input in docker graylog 3.3.10
Graylog received JSON - extract normal.
But when i try to change timestamp from datetime(value in JSON) i cant see result
JSON
{“datetime”:“2021-05-24 12:41:04.049 +00:00”,“log_level”:“INFO”,“message”:“Id = xxxxxxxx deleted”,“message_template”:“Id = {PropertyId} deleted”,“properties”:{“PropertyId”:xxxxxxxx}}
My pipeline rule
rule “change_timestamp”
when
true
then
let new_datetime = parse_date(to_string($message.datetime), “yyyy-MM-dd HH:mm:ss.SSS Z”);
set_field(“timestamp”, result);
end
Thank for helps