Copy value of @timestamp to another field

[e_willemsen (Erwin Willemsen)]

Maybe this will help:

Copy `@timestamp` in Logstash

I would like to preserve the @timestamp field prior to overwriting it from a date filter, so that I can know when a document was processed by logstash. I also tried using the copy filter, but that fails silently. mutate { copy => { "%{@timestamp}" => "logstash_intake_timestamp" } } I tried this, but it also caused exceptions (I don't have the stack trace right now, but I could get it if it would help the investigation). mutate { copy => { "@timestamp" => "logstash_intake_ti…