Hello, I am sending json logs to logstash and I want to overwrite the @timestamp field. To do this I do: json.keys_under_root: true json.overwrite_keys: true The log entries goes to logstash, but in Kibana the @timestamp field is not overwritten and shows the error: @timestamp not overwritten …

Overwriting json @timestamp

2knarf (Frank Solli) July 28, 2017, 4:07pm 11

Yes, tried with and without.

Topic		Replies	Views
Json date is not parsing to @timestamp Logstash	5	2118	May 21, 2020
Timestamp format while overwriting Beats filebeat	6	2808	September 4, 2017
Log with @timestamp value in it - getting errors Logstash	2	390	December 18, 2019
How to transfer original @timestamp from json log to logstash Logstash	4	1540	March 16, 2017
Logstash Does not extract timestamp from JSON Logstash	6	5051	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Overwriting json @timestamp

Related topics