Can we use a Unix Timestamp as _timestamp field in elasticsearch

Question

When we create time-based indices, elasticsearch/kibana need a field named "_timestamp".

I found that this field should be a string.

But in my log, Unix Timestamp is a necessary segment.

avr · Accepted Answer · 2017-04-11 10:30:27Z

3

Yes you can store unix timestamp in Date type fields. But make sure you use proper format like epoch_millis for timestamp in millis and epoch_second for timestamp in seconds.

Example mapping for timestamp field which stores unix timestamp in seconds.

PUT my-index
{
  "mappings": {
    "my-type": {
      "properties": {
        "timestamp": {
          "type": "date",
          "format": "epoch_second"
        }
      }
    }
  }
}

You can find more information here

answered Apr 11, 2017 at 10:30

avr

4,9231 gold badge21 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Can we use a Unix Timestamp as _timestamp field in elasticsearch

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related