Hi, I have json log in the following format: {"@timestamp":"2017-01-18T11:41:28.753Z","source":"host1","level":"INFO","message":"Some log event"} the log is read by filebeat and sent to redis/logstash/elasticsearch/kibana. The problem is that filebeat puts in @timestamp the time at which the log…

I've changed "json.overwrite_keys: false" to true in filebeat config and now the @timestamp in Elasticsearch matches the one in my log. I also removed grok and date filters from logstash config, i.e. now it goes straight from Redis input to Elasticsearch output without any filters. I assume that yo…

Replace @timestamp with actual timestamp from log file

Elastic Stack Logstash

system (system) Closed February 16, 2017, 4:59pm 17

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
How to overwrite Log time values with @timestamp Logstash	3	2347	December 26, 2016
Unable to replace @timestamp with some other field in logstash Logstash	6	2345	September 19, 2017
Replacing @timestamp with actual logtime Logstash	6	331	August 26, 2019
Replacing @timestamp correctly Logstash	9	525	March 13, 2019
Can i replace logstash timestamp with timestamp of my logfile? Logstash	17	40328	July 6, 2017

Replace @timestamp with actual timestamp from log file

Related topics