Metricbeat sql module fields query - change to date/time

When I ingest metricbeat sql module fields they are stored as a string.
How can I change some of the date/time fields returned from the sql query from string to date/time to be used in Kibana?

Have you checked the Painless documentation on how to work with dates? There are quite a few examples that you may find interesting to put in a runtime field.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.