Formatting @timestamp in Canvas

Elastic Stack Kibana
1

In ELK Stack 7.3 using Kibana and Canvas.
So the issue I discovered in formatting @timestamp into a date time.
This is the original message :

{"@timestamp":"2019-10-08T16:35:14.455Z","hostname":"MYHost2","ip":"2.2.2.2","vm":"VM Desc 2","status":"UP","latency":"2ms"}

This is my Elastic Search output
{
"_index": "boris-topic",
"_type": "_doc",
"_id": "3wqosW0BN-pLbXvgd41G",
"_version": 1,
"_score": null,
"_source": {
"vm": "VM Desc 2",
"@timestamp": "2019-10-08T16:35:14.455Z",
"ip": "2.2.2.2",
"status": "UP",
"hostname": "MYHost2",
"@version": "1",
"latency": "2ms"
},
"fields": {
"@timestamp": [
"2019-10-08T16:35:14.455Z"
]
},
"sort": [
1570552514455
]
}

This is from Canvas:

filters
| essql
query="SELECT "@timestamp" as time, hostname FROM "boris-topic*"
where hostname is not null"
| mapColumn time fn={ getCell time | formatdate format="dddd, MMMM Do YYYY, hh:mm:ss" }
| table paginate=true showHeader=true
| render

image
image.png778×184 2.21 KB

The original field had "@timestamp": [
"2019-10-08T16:35:14.455Z"

This is in Kibana:

image
image.png1004×624 5.93 KB

In Kibana the @timestamp is Oct 8, 2019 @ 12:35:14.455

The datetime on the canvas is wrong
Please help!

2

I believe you're running into a timezone issue, which is something being tracked here: https://github.com/elastic/kibana/issues/33959

3

I understand that @timestamp is in UTC format. When I set the dateFormat:tz as UTC I would see same format in both Discover Table and JSON.

image
image.png1192×753 25.5 KB

In Canvas I am not able to change format to my timezone. I tried many ways however I can only see the UTC format.
image

4

Is there a workaround for this time format issue?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.