bash - convert date time into compatible format for kibana

Question

I'm using elasticsearch REST API to add some data to be used in kibana dashboard. I have time stamps in this format 2015-08-04 10:13:14 . This format seems to be incompatible with kibana.

Is there any way to convert it to something like logstash timestamps (2015-08-04T10:13:14.000Z) or any other solution to get kibana work on this?

Answer 1

you can get the exact miliseconds by using:

timestamp=`date +"%Y-%m-%dT%T.%3N"`

As seen in Linux command to get time in milliseconds :

• date +"%T.%N" returns the current time with nanoseconds.

• date +"%T.%6N" returns the current time with nanoseconds rounded to the first 6 digits, which is microseconds.

• date +"%T.%3N" returns the current time with nanoseconds rounded to the first 3 digits, which is milliseconds.

Answer 2

You can use the logstash date filter to parse timestamps in any format. See the documentation .

Answer 3

Replace with bash one whitespace by T and append .000Z :

a="2015-08-04 10:13:14"
b="${a/ /T}.000Z"
echo "$b"

Output:

2015-08-04T10:13:14.000Z