Two Index pattern with different time filter field names

Elastic Stack Elasticsearch
#1

I have one index and I want to visualize my data using two different time filters (i.e. two different fields).
Do I need to create two index patterns? Is it even possible to create two index pattern on same index? I thought I could create second index pattern and choose another filed as time filter, doesn't allow me though.

Details:

doc
{
  mydata : "abcd"
  timestamp1: 1605905471710
  timestamp2: 1605905471099
}

I want to visualize my data based on timestamp1 and timestamp2 separately.

#2

You must already index the two timestamps with the correct mapping = date and then you can create two separate visualize

#3

I did not understand. Can you please elaborate a bit?
When I create index pattern, I can select only one of the fields (timestamp1 or timestamp2) as time filter. Let's say I select timestamp1 as time-filter.
Now if I try to create another index pattern (with time filter as timestamp2), it does not allow me to create , it says index pattern already exists with same name.
Are you saying it is not necessary to create another index pattern?

#4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.