Thanks. If I delete all previous indices, I will lose some precious old data.
In that case would creating a new index be the only option?
Or you can just save it as a new field like we did with tempDate and use that instead. But this will only work for new data coming in.
The question would be do you need all your old data to work with that old field?
We would be good with new data coming in the expected format
Then problem solved. Just name that new field to something better. 
If you do want to conserve the old data then it will involve reindex and some painless scripting.
Thank you so much! We can perhaps name it as "timeCreated" instead of "createdTime" and go from there
1 Like
timeCreated now shows as "date" format:
Is it possible to hide "createdTime" entry from appearing in Kibana:
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.