I've created at the beginning a kibana index pattern using the filebeat json file and Time Filter field name: @timestamp.
Now I want to view the logs on Discovery view with a different timestamp field.
How can do this?
You'll have to create a separate index pattern to accomplish this. You could name it
filebeat-** or something with an extra
* at the end so it doesn't conflict with the existing one.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.