Hi all,
I’ve set up a nice little grok parse that works fine except for one thing: I can’t get the timestamp imported from the actual data.
My data has a timestamp in epoch format and three float values - like this:
timestamp;value1;value2;value3
1621005982214.866,17.37,25.27,28.69
My telegraf config including grok pattern is:
[[inputs.tail]]
files = ["/mnt/log/data.csv"]
data_format = “grok”
from_beginning = false
name_suffix = “_logdata”
grok_patterns = [’%{NUMBER:timestamp:ts},%{NUMBER:value1:float},%{NUMBER:value2:float},%{NUMBER:value3:float}’]
It works fine now except for the timestamp parse - I find the timestamp column in my influxdb, but not as actual timestamp of the data, rather as a field. So the first import with “from_beginning = true” puts all records into the db under the timestamp of the import, and only continuous run fills it later as a proper time sequence of data points.
Is there a way to do this? The documentation of inputs.tail didn’t help me, or maybe I just didn’t find the right section - would be grateful for any tips.
-Syd
