# Cannot change timestamp field in an existing data view in kibana

**URL:** <https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532>\
**Category:** Kibana\
**Created:** [December 6, 2022, 7:24am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532 "2022-12-06T07:24:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mikhatanu](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\
**Post date:** [December 6, 2022, 7:24am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/1 "2022-12-06T07:24:19Z")

</div>

Hello, I have created a dataview that uses @timetamp field which is generated from logstash. I wanted to change (edit) the default timestamp field to another field (timestamp\_seconds) in  
the dataview, but it is greyed out and not clickable. Is it not possible to change existing data view's default timestamp?

---

<div class="post-metadata">

**Author:** ![dadiasish](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadiasish/32/114221_2.png) [@dadiasish](https://discuss.elastic.co/u/dadiasish)\
**Post date:** [December 6, 2022, 7:51am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/2 "2022-12-06T07:51:36Z")

</div>

Is your "timestamp\_seconds" also of date format? You can check this from the existing index pattern which you created.

If the "timestamp\_seconds" is of date format, then create a new index pattern with this field.

Then, delete the existing index pattern, create a copy of the dashboard from saved objects, and tag it to the existing pattern with new date field.

If field is not of date type, first you need to convert your field to date format and then only you will be able to use it.

---

<div class="post-metadata">

**Author:** ![mikhatanu](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\
**Post date:** [December 6, 2022, 8:00am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/3 "2022-12-06T08:00:34Z")

</div>

it is date format. When first creating dataview, in the timestamp section, i can select it. That time, i select @timestamp as the timestamp for the dataview. Now, I wanted to change it to other field, but it is greyed out.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/2/82bcac104d48dede74f7c3355a5069ad255ae201.png)

---

<div class="post-metadata">

**Author:** ![dadiasish](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadiasish/32/114221_2.png) [@dadiasish](https://discuss.elastic.co/u/dadiasish)\
**Post date:** [December 6, 2022, 8:05am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/4 "2022-12-06T08:05:52Z")

</div>

just delete the existing one and create a new pattern. That will enable you the drop down and you can see the other date fields in it.

---

<div class="post-metadata">

**Author:** ![mikhatanu](https://avatars.discourse-cdn.com/v4/letter/m/ba8739/32.png) [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\
**Post date:** [December 6, 2022, 8:45am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/5 "2022-12-06T08:45:45Z")

</div>

I manage to remove the grey out by reentering the index pattern in edit data view. Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 3, 2023, 8:46am UTC](https://discuss.elastic.co/t/cannot-change-timestamp-field-in-an-existing-data-view-in-kibana/320532/6 "2023-01-03T08:46:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
