Milliseconds in timestamp for Curator

Elastic Stack Elasticsearch
1

Based on this doc, I composed a timestring based on the timestamp I send to Elasticsearch. I've gotten this far:

%Y-%m-%WT%H:%M:%S.469436

469436 are milliseconds. How do I tell Curator about those? Or should I use regex (match all) to cover them?

2

494 is milliseconds. That there are 6 orders of magnitude (microtude?) that means these are microseconds. Are you using nanosecond resolution in Elasticsearch?

The official Elasticsearch documentation explains that aggregations are only in millisecond resolution, so this is probably unnecessary. Curator will handle the calculations properly because of this, and only does down to the second resolution itself.

3

You are right - they are not milliseconds. I've decided to use the basic_date_time_no_millis date format like this:

from datetime import datetime
        dt = datetime.utcnow()
        timestamp = dt.strftime('%Y%m%d')
        timestamp += dt.strftime('T%H%M%S')

Which results in a timestamp like 20190817T105422. That lead to another issue . I guess this format should work with Curator.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.