small percentage of incoming records have no time stamp ... how do I add that time stamp to the record - to make it equal to current run time?
LS adds that automatically to the @timestamp
field.
... those records are already tagged in the first part of the logstash filtering with add_tag with value "no_timestamp"
ok - so no need to explicitelly do that ...
thanks