Hi,
I run into this blog post regarding storing timestamps.
If I let Elasticsearch map the @timestamp field (as date) and there aren't milliseconds (always 000) in the logs, I'd assume that explicitly mapping that date as epoch_second
won't change much. Am I right?
Thanks!