Assign timestamp value to field in filebeat


Is there a way for me to assign the timestamp value to an add_field? Like for example:

- add_fields:
      collectiontime: "@timestamp"

This example doesn't work because when I check the debug log I see a:


and I really want:


ie, the actual time.

or maybe there is a way to call a Linux command, like:

collectiontime: %{date}

where 'date' is the Linux command (I am sure I have the format wrong)


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.