Hi,
I'd need help to understand how to set the @timestamp field with the content of another field that contains date and time with nanoseconds precision. I've tried to use the date match but it's not clear to me which pattern must be used for the scope:
date {
match => ["timestamp_nano", "ISO8601"]
target => "@timestamp"
}
where timestamp_nano is timestamp with nanoseconds precision (e.g. "2022-01-20T12:00:00.123456789Z").
By using ISO8601 there is a milliseconds precision and the rest of the digit are not reported in the @timestamp field.
Which is the pattern to be used in the match?
Thanks in advance
BRs, ale