Can't get high granularity for a timestamp

Elastic Stack Logstash
1

Hey everyone,

in one of our use cases with elastic, we're sending logs to it... as most people do.
and it seems that the timestamp is limited only to 3 digits in the miliseconds (and lower) space, but we want to have higher granularity than that.
I've tried to use something like the following conf in the screenshot to make it happen but to no avail.

1
1.PNG1132×462 22.6 KB

then got to this super old bug that seems to be still valid?..?
https://logstash.jira.com/browse/LOGSTASH-1585

please advice if there is a way to make the timestamp show microseconds...

thanks!

2

The date data type in Elasticsearch is limited to millisecond resolution, so right now there's no workaround unless you want to store the microseconds (or whatever resolution you want) in a separate field.

3

this limitation you mention is in the docs?
and do you have an idea if there is an open feature request to change that limitation?

4

this limitation you mention is in the docs?

Yes. It's mentioned in one of the first paragraphs in the date data type docs.

and do you have an idea if there is an open feature request to change that limitation?

I have no idea but I would assume so.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.