I am capturing logs from hosts using winlogbeat and filebeat and sending them to the logstash, that is shipping them to the Elastic.
The problem I am facing, is that filebeat and winlogbeat as well as logstash are useing '@timestamp' field to store event timestamp. The thing is that logstash is rewriting this field with it's timestamp, making quite a mess in the logs.
Is there any way to tell logstash not to rewrite it? Of I do have to bring extra field and totally ignore @timestamp field at all?