-
Undesired Output
Attempt 1
from https://vector.dev/docs/about/under-the-hood/architecture/data-model/log/ Attempt 2How I normally transform a json log events before sending to
Attempt 3Grasping at straws, I even tried embedding the timestamp in a tag and transforming after the conversion
|
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
One guess is that the timestamp needs to be parsed using |
Beta Was this translation helpful? Give feedback.
One guess is that the timestamp needs to be parsed using
parse_timestamp
in aremap
transform into a field that is an actual "timestamp" and not a string representation of a timestamp.