When parsing a field on the ingest pipeline; I would expect that the field would be created as Date on elasticsearch, but what I see is that they are created as String.
I tried two different ways of parsing, below the samples:
Trying to overwrite the same time:
{ "date": { "field": "request.time", "ẗarget_field": "request.time", "formats": ["ISO8601"], "ignore_failure": true, "timezone": "UTC" } }
Creating a new field:
{ "date": { "field": "request.time", "ẗarget_field": "request_time", "formats": ["ISO8601"], "ignore_failure": true, "timezone": "UTC" } }
Am I missing something? Convert processor do not have an option for date.
The format of the date is a valid ISO8601:
"time":"2019-07-29T20:23:33.222Z"