Manipulate @timestamp with backfill

Elastic Stack Elasticsearch
1

Is it possible to manipulate the @timestamp value for data going into elasticsearch? I have a program that did not run on a specific day and push data into elasticsearch and I wanted to backfill, but all that data would show in the current days view on a timeline histogram.

If the @timestamp value could be manipulated for a specific set of data to be resent it would back fill that missing days data/ counts in the same index. Is there perhaps a filter I could use that sets the timestamp value for the data in the logstash conf.

any ideas appreciated.

2

You can index any values in you want in Elasticsearch. You just need to populate your documents with the values you require.

3

Are you saying that if I include the @timestamp value in my document, it will get indexed and displayed in the timeline histogram count as that specific date & time.