Thank you @ChrsMark , this is the information that I was looking for and couldn't find in the docs.
And this is the solution that I am actually testing to do it, along with the options
queue.mem:
events: 4096
flush.min_events: 512
flush.timeout: 5s
I'm trying to regroup the events of each collection period in the same timestamp, but it looks like that the timestamp field is always filled with the ingestion time.
The result is some seconds of difference
Do you think it is possible to overwrite @timestamp filed to have the time of when the event was sent to Elastic by Metricbeat instead of the ingestion time by Metricbeat ?
Or I can use processors to add a new field, but how can I get the Elastic ingestion timestamp ?