Load Null values to Index Key column

Hi Team,

we had created index with location_timestamp as key of type date and format "epoch_millis" as below.

  "location_timestamp":{
    "type": "date",
    "format": "epoch_millis"
  },

But while loading data from csv file the 127th field which contains the value of location_timestamp is null.
so we are getting error as below in filebeat logs but the other field values getting loaded to the index.

\"reason\":\"failed to parse date field [location_timestamp] with format [epoch_millis]\",\"caused_by\":{\"type\":\"date_time_parse_exception\",\"reason\":\"date_time_parse_exception: Failed to parse with all enclosed parsers\"}}}, dropping event!","service.name":"filebeat","ecs.version":"1.6.0"}

During the process of querying the sequence key from the index, the RHS side panel of the development console displays all other keys and their corresponding values. However, the field for location_timestamp is notably absent from the RHS side panel.

GET /myindex/_search
{
"query" : {
    "term" : { "sequence" : "38583362" }
	}
}

Our requirement is how we can loaded location_timestamp field with these null values.

Thanks,
Debasis

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.