The timestamp field usually have a "@" prefix. Why? What is the difference if we do not add it ?
@ fields are usually ones generated by Logstash as metadata ones, @timestamp being the value that the event was processed by Logstash.
3 Likes
Hi Mark
Nice to see you. Thanks for your answer. So it means we can change the @timestamp to timestamp if we want, right?
As long as we are not using logstash
If you want, yes.
Thanks very much. I posted another question here
Is it possible for you to have a look also? Thanks very much