I created an index in elastic search with few fields and when i try to get this index in kibana (through setting, time based index events) , I can't see @timestamp field appearing in the fields dropdown. I do have other indexes in same elasticsearch for which same field is appearing.
Do I need to change anything specific to an index for this ?
I assume the indexed documents contain a @timestamp field? If so, they should be assigned the date type in the mapping. You can check the mapping of your index by querying ${INDEX_NAME}/_mapping using the Dev Tools Console or any other HTTP client.
Hi @weltenwort No I haven't added @timestamp field explicitly and I don't have any date related field in schema/metadata. if that's blocking , How can I use this index in kibana ?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.