version: 7.0.0
problem: Can't create a time-based index pattern. Field type appears as "unknown" when the @timestamp type is date_nan
os.
how to reproduce:
- On Elasticsearch
PUT _template/test-nano
{
"index_patterns": ["test-*"],
"settings": {
"number_of_shards": 1,
"number_of_replicas": 0
},
"mappings": {"properties": {"timestamp": {"type": "date_nanos"}}
}
}
POST _bulk
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-23T13:56:34.056753827Z" }
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-23T13:56:34.056753826Z" }
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-23T13:56:34.056753824Z" }
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-24T13:56:34.056753825Z" }
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-24T13:56:34.000000001Z" }
{ "index" : { "_index" : "test-nano" } }
{ "@timestamp":"2019-04-24T13:56:33.999999999Z" }
GET test-nano
GET test-nano/_search
- On Kibana
Try to create a time-based index pattern(test-nano*) and try to pick a time at the discovery timeline.