Why @timestamp is shown as 'Text' in ES?

Elastic Stack Beats
1

In Kibana Discover page, I can see @timestamp is shown as 't' and there was no prompt asking for the Time Filter Field Name (as there is no Date field available in the Index).

Why is it like that?

I am using newly created module in FileBeat and in the pipeline.json it is like this:

  {
    "date": {
      "field": "dt",
      "target_field": "@timestamp",
      "formats": [
        "E MMM dd HH:mm:ss yyyy"
      ],
    }
  }

and I generated the fields by using make create-fields command and timestamp was not generated in the fields.yml file.

I used filebeat setup --pipelines --modules command to update the pipeline.

Was it because that I can't assign the date parsed from the log to this @timestamp field?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.