Can't get high granularity for a timestamp


(dboss101) #1

Hey everyone,

in one of our use cases with elastic, we're sending logs to it... as most people do.
and it seems that the timestamp is limited only to 3 digits in the miliseconds (and lower) space, but we want to have higher granularity than that.
I've tried to use something like the following conf in the screenshot to make it happen but to no avail.

then got to this super old bug that seems to be still valid?..?
https://logstash.jira.com/browse/LOGSTASH-1585

please advice if there is a way to make the timestamp show microseconds...

thanks!


(Magnus Bäck) #2

The date data type in Elasticsearch is limited to millisecond resolution, so right now there's no workaround unless you want to store the microseconds (or whatever resolution you want) in a separate field.


(dboss101) #3

this limitation you mention is in the docs?
and do you have an idea if there is an open feature request to change that limitation?


(Magnus Bäck) #4

this limitation you mention is in the docs?

Yes. It's mentioned in one of the first paragraphs in the date data type docs.

and do you have an idea if there is an open feature request to change that limitation?

I have no idea but I would assume so.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.