# Metricbeat timestamp mapping as string type, should be date?

**URL:** https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521
**Category:** Beats
**Created:** [December 19, 2017, 10:57pm UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521 "2017-12-19T22:57:46Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)
#### Post date: [December 19, 2017, 10:57pm UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521/1 "2017-12-19T22:57:46Z")

</div>

Trying to get started with filebeat and metricbeat I've noticed that filebeat defines @timestamp as type/format date/date while metricbeat does so as string/date (as shown in the kibana index patterns).

Consequently, using Kibana "Discover" doesn't show any data for metricbeat index but for filebeat index. Both indexes are populated and the beats running and connected.

What/ is there something wrong with the metricbeat index definition in v6.1.1?

Thanks,  
andreas

PS.: I've not been able though to find out where `@timestamp` is actually defined per beat type, any hint is appreciated.

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [December 22, 2017, 4:44am UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521/2 "2017-12-22T04:44:46Z")

</div>

All beats should have the exact same format for `@timestamp`. Can you share your configs? Did you load the templates for the beats?

---

<div class="post-metadata">

### Author: ![andig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andig/32/25705_2.png) [@andig](https://discuss.elastic.co/u/andig)
#### Post date: [December 22, 2017, 7:35am UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521/3 "2017-12-22T07:35:59Z")

</div>

After starting from scratch with andig/beats4pi with a "ready" image plus raspi binary I can no longer reproduce this. It happened when I made the entire package, including fields.yml from source.

Is there any build documentation that describes which make targets are required for building the necessary config files apart from make build? Maybe I was ignoring an important step?

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [December 27, 2017, 1:38am UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521/4 "2017-12-27T01:38:06Z")

</div>

`make update` is your most important setup to make sure the full `fields.yml` is generated.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 9, 2018, 10:57pm UTC](https://discuss.elastic.co/t/metricbeat-timestamp-mapping-as-string-type-should-be-date/112521/5 "2018-01-09T22:57:53Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
