# How can filebeat confirm the logs sequence that log do not have timestamp?

**URL:** <https://discuss.elastic.co/t/how-can-filebeat-confirm-the-logs-sequence-that-log-do-not-have-timestamp/168139>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 13, 2019, 3:33am UTC](https://discuss.elastic.co/t/how-can-filebeat-confirm-the-logs-sequence-that-log-do-not-have-timestamp/168139 "2019-02-13T03:33:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![xingnailu](https://avatars.discourse-cdn.com/v4/letter/x/e0b2c6/32.png) [@xingnailu](https://discuss.elastic.co/u/xingnailu)\
**Post date:** [February 13, 2019, 3:33am UTC](https://discuss.elastic.co/t/how-can-filebeat-confirm-the-logs-sequence-that-log-do-not-have-timestamp/168139/1 "2019-02-13T03:33:44Z")

</div>

hi~  
I am going to collect the logs style like (don't have timestamp):  
 ![1550028222894](https://us1.discourse-cdn.com/elastic/original/3X/b/e/beff20ec6d640ce62b068771eeef2787cf4d6612.jpeg)

is there some method that can confirm the log is ordered on es ?

I know the filebeat config : ![fields](https://us1.discourse-cdn.com/elastic/original/3X/0/0/002317a0105a677a111a8938080193d79ce3462a.jpeg)

but the fields can't @timespate. so anybody can help me ? (I don't want replace the filebeat with logstash on every node)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 13, 2019, 3:33am UTC](https://discuss.elastic.co/t/how-can-filebeat-confirm-the-logs-sequence-that-log-do-not-have-timestamp/168139/2 "2019-03-13T03:33:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.