The timestamp used for the index is always the current time instead of the @timestamp I parse from the event. I've tried various workarounds such as trying to remove/redefine [@metadata][index] but can't get filebeat or beats input to play nice. I wasn't seeing this behavior from logstash-forwarder. Does this sound like user error on my part or are others experiencing the same behavior?
I filed this issue: