Specify strict_date_optional_time_nanos format for date data type

Elastic Stack Beats
1

Hi all!

I'm using "setup.template.append_fields" in filebeat to specify extra fields. I can specify a "type" where I'm using "date" as the data type. How would I specify the "strict_date_optional_time_nanos" format.

This doesn't work:

setup.template.append_fields:
  - name: dissect.created_utc
    type: date
    format: strict_date_optional_time_nanos
2

Just wondering if anyone knew anything about this.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.