Hi, I have a field that I read as a time field, sometimes the time that is given is " " and is converted to "0" which is in Epoch time 1970. I have a requirement to keep the field as 0 or " " (Rather " " ) and not translate it to epoch. I will be happy for any solution.
Are you saying that it is converted to 0 inside Kibana or inside the Elasticsearch index?
Hi,
Thank you for your reply. I fixed it by making the Logstash not to read it as a date figure.
To your question: inside the ES index.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.