Create day-of-week and hour-of-day fields from date field during indexing

Elastic Stack Elasticsearch
1

Our data contains a timestamp that is mapped to a date type and has format yyyy-MM-ddTHH:mm:ssZ (e.g. 2019-01-20T18:00:53Z).
We would like to change it to a multi-field containing different properties of the date - day of week and hour of day - so they can be searched directly without using a script at search time.
Is it possible to extract the day-of-week and hour-of-day during indexing? Can a script be used in the template mapping to create the day-of-week and hour-of-day fields?

2

Have a look at ingest node feature and the script processor.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.