Timestamp format

Elastic Stack Elasticsearch
1

Hello all,

I'm using currently rsyslogd to send messages to elasticsearch and kibana
as a GUI.

Rsyslogd is sending the @timestamp in the following format:

2014-07-31T21:01:16.515922+03:00

I was wondering if elasticsearch is able to understand this format? Because
kibana sorting doesn't do anything with it. The sorting is completly random.

Should I send the timestamp in another format? Can I keep the microseconds?

Best regards,
Cristian Falcas

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

2

Hey,

from the top of my head, joda (the underlying library used in Elasticsearch
for date handling) only does millisecond and so does Elasticsearch. Maybe
you can break down the micro to milliseconds and try again? Also, you might
need to create your own date format, see

--Alex

On Thu, Jul 31, 2014 at 8:25 PM, Cristian Falcas cristi.falcas@gmail.com
wrote:

Hello all,

I'm using currently rsyslogd to send messages to elasticsearch and kibana
as a GUI.

Rsyslogd is sending the @timestamp in the following format:

2014-07-31T21:01:16.515922+03:00

I was wondering if elasticsearch is able to understand this format?
Because kibana sorting doesn't do anything with it. The sorting is
completly random.

Should I send the timestamp in another format? Can I keep the microseconds?

Best regards,
Cristian Falcas

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com
https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAGCwEM_wdABki5HOajtfieFEvyr24XhFNMAJrtiXKZkgYm6VVw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.