Showing a timestamp of 0 as 0 and not 1970

Hi, I have a field that I read as a time field, sometimes the time that is given is " " and is converted to "0" which is in Epoch time 1970. I have a requirement to keep the field as 0 or " " (Rather " " ) and not translate it to epoch. I will be happy for any solution.

Are you saying that it is converted to 0 inside Kibana or inside the Elasticsearch index?

Thank you for your reply. I fixed it by making the Logstash not to read it as a date figure.

To your question: inside the ES index.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.