How to restrict timestamp field in multi layer JSON where field with same name but different data types are present in second layer of JSON

(Sudhanshu) #1

In my dynamic template I am adding field with name "timestamp" as of date type. It is later converted to epoch. now in a particular case there is one more field with name "timestamp" in second layer of multi layer JSON, for which epoch conversion is failing.
I want to restrict elastic search to consider the "timestamp" field in only at layer 1 of JSON.

IS there any configuration by which I can achieve this?

My Sample JSON:


"userName":" test@test.address ",
In the above JSON the inner timestamp value is failing to convert to epoch.

Dynamic template: below mention as timestamp field in Dynamic Template.


(Sudhanshu) #2

Is there any configuration to limit where to look for timestamp field in JSON before sending it to elastic search.