# One Deata view @timestamp alarm
**URL:** https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624
**Category:** Logstash
**Created:** [March 26, 2026, 2:03am UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624 "2026-03-26T02:03:19Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Wing\_W](https://discuss.elastic.co/u/Wing_W)
#### Post date: [March 26, 2026, 2:03am UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624/1 "2026-03-26T02:03:19Z")
This request queries Elasticsearch to fetch the documents.
Search session id: d53c937d-ef25-4122-862c-9cc00f861186
Node
c60fcARCT5m2jef2\_njmog
Reason
error fetching [structured.@timestamp]: Field [structured.@timestamp] of type [flattened] doesn't support formats.
Caused by type
illegal\_argument\_exception
Caused by reason
Field [structured.@timestamp] of type [flattened] doesn't support formats.
Please help for check and fix. I have changed the Logstash pipelines … and my teammate change some.
---
### Author:  [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [March 26, 2026, 12:10pm UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624/2 "2026-03-26T12:10:28Z")
Welcome to the community.
It seams something not OK with data format which LS have sent to ES. Have you check what is the @timestamp format? Also make sure that is acceptable on the ES side - mapping or template .
Can you please provide more details?
---
### Author:  [@RainTown](https://discuss.elastic.co/u/RainTown)
#### Post date: [March 26, 2026, 2:35pm UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624/3 "2026-03-26T14:35:42Z")
Welcome to the forum.
> [@Wing\_W](#):
>
> Please help for check and fix. I have changed the Logstash pipelines … and my teammate change some.
Errr ..... telling us _what_ you changed, and what your colleagues changed, will give us more of a clue? Please. and the actual query/search you did will be useful too.
And it's unlikely _we_ can actually fix your issue, though we can possibly tell you what _you_ need to change/adapt. But first you need help us help you by supplying more details.
---
### Author:  [@Wing\_W](https://discuss.elastic.co/u/Wing_W)
#### Post date: [March 27, 2026, 6:10am UTC](https://discuss.elastic.co/t/one-deata-view-timestamp-alarm/385624/4 "2026-03-27T06:10:22Z")
Thanks fixed .that is Logstash pipelines changed and the mapping structured as flattened.