# Copy value of @timestamp to another field

**URL:** https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634
**Category:** Beats
**Tags:** filebeat
**Created:** [September 20, 2021, 3:16pm UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634 "2021-09-20T15:16:11Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![mostpha456](https://avatars.discourse-cdn.com/v4/letter/m/7feea3/32.png) [@mostpha456](https://discuss.elastic.co/u/mostpha456)
#### Post date: [September 20, 2021, 3:16pm UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/1 "2021-09-20T15:16:11Z")

</div>

Hello,

I am trying to copy the value of @timestamp to new field timestamp keeping the same format.  
Is that possible ? Do you have any suggestion ?

Thank you.

Mustapha

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 21, 2021, 12:53am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/2 "2021-09-21T00:53:52Z")

</div>

It'd be useful if you could share what you are trying, along with examples of why it's not working for you.

Otherwise we're guessing at what format you have and want to maintain.

---

<div class="post-metadata">

### Author: ![mostpha456](https://avatars.discourse-cdn.com/v4/letter/m/7feea3/32.png) [@mostpha456](https://discuss.elastic.co/u/mostpha456)
#### Post date: [September 21, 2021, 7:13am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/3 "2021-09-21T07:13:50Z")

</div>

Hello,  
Thanks for the reply.  
The default format of @timestamp "2021-09-20T13:08:56.181Z". I am trying copy the value of the field @timestamp in a new field using filebeat, but @timestamp is special beat.Event field, so i cant use processors to manipulate it.  
Thank you.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [September 21, 2021, 7:15am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/4 "2021-09-21T07:15:56Z")

</div>

Can you please share the config that you are trying to use.

---

<div class="post-metadata">

### Author: ![e\_willemsen](https://avatars.discourse-cdn.com/v4/letter/e/c4cdca/32.png) [@e\_willemsen](https://discuss.elastic.co/u/e_willemsen)
#### Post date: [September 22, 2021, 9:26am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/5 "2021-09-22T09:26:03Z")

</div>

Maybe this will help:

> [@Copy \`@timestamp\` in Logstash](https://discuss.elastic.co/t/copy-timestamp-in-logstash/139430):
>
> I would like to preserve the @timestamp field prior to overwriting it from a date filter, so that I can know when a document was processed by logstash. I also tried using the copy filter, but that fails silently. mutate { copy =\> { "%{@timestamp}" =\> "logstash\_intake\_timestamp" } } I tried this, but it also caused exceptions (I don't have the stack trace right now, but I could get it if it would help the investigation). mutate { copy =\> { "@timestamp" =\> "logstash\_intake\_ti…

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 20, 2021, 11:26am UTC](https://discuss.elastic.co/t/copy-value-of-timestamp-to-another-field/284634/6 "2021-10-20T11:26:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
