Hello, I use Filebeat to export JSON String to --> logstash --> elasticsearch --> Kibana My application's log4j creates each log as JSON String like below.. it has loggingTime key & pair which is actual timestamp of that log message. {"loggingTime":"Wed 14 Jun 2017 15-03-49 126 EDT","application…

I read that It could be done by overriding @timestamp through logstash filter plugin date.. I solved this issue by having following settings in the logstash config file filter{ date{ locale => "en" match => ["loggingTime","EEE d MMM yyyy HH-mm-ss SSS z"] target => "@timestamp" } } After this…

Discover: Field data loading is forbidden on [loggingTime]

Elastic Stack Logstash

system (system) Closed July 13, 2017, 2:21pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Replacing @timestamp correctly Logstash	9	525	March 13, 2019
Populating logtime for @timestamp Logstash	15	2869	November 13, 2017
How to change @timestamp field in kibana with timestamp of my logs time Logstash	2	3839	July 6, 2017
Change default logstash @timestamp with a timestamp from my logs Logstash	4	872	June 26, 2018
Replace @timestamp with log's time Somebody help me please Logstash	18	2289	July 30, 2019

Discover: Field data loading is forbidden on [loggingTime]

Related topics