I am confused by the need for the mandatory @timestamp as it does not seem to be used in any part of the data stream. The date on the index is based on creation date instead of the @timestamp field. Rollover also seem to depend on the age of the index rather than the @timestamp field. It seems to me that even without the field, the data stream would have functioned just fine. Is there something I am missing? Why is it a requirement to include the @timestamp field? What is the field used for?
Welcome to our community!
It's used in Kibana, to plot time based graphs.
Does that mean that when I create a data stream, visualizations will also be created at the same time?
That'll depend if you are using a module from one of the Beats or not, otherwise, no.
Alright, thank you!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.