Version: logstash-input-kafka (8.3.1)
- Operating System: Red Hat 7.2
- Logstash: 6.8.1
I am using decorate_event in my kafka input section. It works nicely but unfortunatly, in combination with codec json, I lost @timestamp as time of indexation. My @timestamp is the time of recording in Kafka, same as [@metadata][kafka][timestamp] but I have lost the timestamp of indexing in logstash. So I have to rebuild my code in order not to use codec json in the kafka input section. Is it a normal behavior ?
Thanks for your tips