Mutate timestamp for nginx logs

Elastic Stack Logstash
3

Hey @magnusbaeck, no my code with stashed_time is working fine.

I had the problem when I tried the suggestion that I referenced from the old thread:

mutate {
      add_field => { "read_timestamp" => "@timestamp" }
   }

I am continuing the thread now, to offer a solution that seems to work with 6.0 and to ask if there was a syntax change from 5.6.

Either way, this indicates that the docs need an update, as they are renaming the @timestamp field without adding a new field - which can lead to "no timestamp field errors"

I see that you also engaged in the previous thread, @magnusbaeck... In general, do you recommend to remove the date from the default index?

Thanks for the help, still finding my way into the world of ELK+beats