How to get document insert date from Elastic search

Elastic Stack Elasticsearch
1

Hi - I am using logstash to ship messages to ES. Logstash automatically adds @timestamp field. I want to know if there is way to tell elastic search or logstash to have actual insert timestamp on document ? is there a elastic search insert timestamp fields which shows in kibana ?

As such I am only seeing @timestamp field which is added by logstash. I am looking for ES insert timestamp.

logstash -> 6.1.1
Elastic Search -> 6.1

I see _timestamp was deprecated in ES. how do I instruct logstash to add _timestamp field.

Finally I want to calculate time difference when logstash has sent the document with when it was inserted in ES.

Thanks,

2

I provided an example of something very similar in this blog post.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.