# Logstash netflow codec v5 First/EndSwitched timestamps shown with .999 precision
**URL:** https://discuss.elastic.co/t/logstash-netflow-codec-v5-first-endswitched-timestamps-shown-with-999-precision/180768
**Category:** Logstash
**Created:** [May 13, 2019, 9:19am UTC](https://discuss.elastic.co/t/logstash-netflow-codec-v5-first-endswitched-timestamps-shown-with-999-precision/180768 "2019-05-13T09:19:17Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)
#### Post date: [May 13, 2019, 9:19am UTC](https://discuss.elastic.co/t/logstash-netflow-codec-v5-first-endswitched-timestamps-shown-with-999-precision/180768/1 "2019-05-13T09:19:17Z")
Logstash: 6.7.0
Plugin: logstash-codec-netflow (3.14.1)
OS: RHEL 7
There is a problem with the **first\_switched** and **last\_switched** timestamps as the documents are not showing millisecond precision.
All my netflow events first\_switched/last\_switched fields are shown with **.999** precision.
```
"last_switched": "2019-05-13T08:44:02.999Z",
"output_snmp": 8,
"packets": 2,
"version": "Netflow v5",
"flow_seq_num": 49642903,
"ip_version": "IPv4",
"tcp_flags_label": "ACK",
"first_switched": "2019-05-13T08:43:32.999Z",
```
**Config file:**
```
input {
udp {
type => "netflow"
port => 5160
codec => netflow {
versions => [5,9]
}
workers => 16
receive_buffer_bytes => 26214400
queue_size => 5000000
}
}
output {
stdout { codec => json }
}
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 10, 2019, 9:19am UTC](https://discuss.elastic.co/t/logstash-netflow-codec-v5-first-endswitched-timestamps-shown-with-999-precision/180768/2 "2019-06-10T09:19:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.