Hi everyone,
I am trying to add a field for the current OS time.
Here is my props.conf and transforms.conf
#props.conf
[mysourcetype]
TRANSFORMS-getdate = get-current-date
#transforms.conf
[get-current-date]
INGEST_EVAL = current_date=now()
But I have this error:
ERROR regexExtractionProcessor - Error compiling INGEST_EVAL expression for get-current-date: Bad function
Is it a bug?
Cheers,
S
Thanks richgalloway,
I found out using time() instead of now() can do the trick.
#props.conf
[mysourcetype]
TRANSFORMS-gettime = get-time-only
#transforms.conf
[get-time-only]
INGEST_EVAL = current_date=time()
Thanks richgalloway,
I found out using time() instead of now() can do the trick.
#props.conf
[mysourcetype]
TRANSFORMS-gettime = get-time-only
#transforms.conf
[get-time-only]
INGEST_EVAL = current_date=time()