title: Logstash to convert epoch timestamp
body: <p>I'm trying to parse some epoch timestamps to be something more readable.</p>
  
  <p>I looked around for how to parse them into a normal time, and from what I understand all I should have to do is something like this:</p>
  
  <pre><code>mutate
  {
      remove_field =&gt; [ "..."]
  }
  
  grok
  {
      match =&gt; { 'message' =&gt; '%{NUMBER:time}%{SPACE}%{NUMBER:time2}...' }
  }
  
  date
  {
      match =&gt; [ "time","UNIX" ]
  }
  </code></pre>
  
  <p>An example of a message is: <code>1410811884.84 1406931111.00 ....</code>
  The first two values should be UNIX time values.</p>
  
  <p>My grok works, because all of the fields show in Kibana with the expected values, and all the values fields I've removed aren't there so the mutate works too. The date section seems to do nothing.</p>
  
  <p>From what I understand the <code>match =&gt; [ "time","UNIX" ]</code>  should do what I want (Change the value of time to be a proper date format, and have it show on kibana as a field.) . So apparently I'm not understanding it.</p>