So you are trying to query in realtime the system time of a remote server that metricbeat is running on?
If so apologies, but that is not supported, Metricbeat only writes data it does not have a direct query interface other than for info and stats
Of course every metric / event that is ingested has a @timestamp which is the timestamp of when the event originated, it respect the timezone of the originating system and is stored in UTC in Elasticsearch.
If you are really interested in a real-time query you would need to Look Into OSQuery
You will need to use the Elastic Agent and the OSQuery Module.
No I am just saying the @timestamp that comes with the metricset document represents the timestamp from the server ... if you are collecting say CPU every 10s (or uptime etc.. etc) in essence you are getting the server time every 10s ... but you can not directly query the server unless you use the OSQuery functionality.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.