I have nginx logs which contain very precise timestamp like this one: `2016-10-27 20:53:03.664`. Translated in seconds, it gives this value: `1477594383.66401`. As a consequence, the scheduled search to populate the table of sessions does not work. I have to replace these parts of the search string :
replace(http_session_referrer_blablabla,"^[0-9]*_","")) by replace(http_session_referrer_blablabla,"^[0-9\.]*_",""))
With this patch the http_session_referer fields are correctly populated even when the timestamp is very precise.
↧