假设您在名为[date]的字段中具有字符串"2019-07-26T16:04:56.853Z"，则它将[dayOfWeek]设置为Friday

Assuming you have the string "2019-07-26T16:04:56.853Z" in a field called [date] then this will set [dayOfWeek] to Friday

    mutate { gsub => [ "Date", "Z$", "" ] }
    date { match => [ "date", ISO8601 ] target => "[@metadata][date]" }
    ruby { code => '
        t = Time.at(event.get("[@metadata][date]").to_i)
        d = DateTime.parse(t.to_s)
        event.set("dayOfWeek", d.strftime("%A"))
    ' }