Overwrite @timestamp to different format

Elastic Stack Logstash
1

I am wondering can I change the format of the default @timestamp field, to be in milliseconds?
I see I can create new field called "time", copy @timestamp to it, and then convert to milliseconds and my time value displays my time in milliseconds.
If I copy the contents of time(in milliseconds) to @timestamp, Logstash fails.

I am wondering if @timestamp format is changeable, or does it need to stay as it is?

2

@timestamp is of type date in Elasticsearch. A date type is...

Internally, dates are converted to UTC (if the time-zone is specified) and stored as a long number representing milliseconds-since-the-epoch.

So @timestamp already supports millisecond granularity. You must however fill it with a source that provides millisecond granularity.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.