'Alternative to _timestamp in Elasticsearch
What is the best way to determine the last modified time for a record in Elastic Search? I don't mind storing it as a separate field, but setting it manually would require a great deal of extra overhead. In the past, I used _timestamp, but that has been deprecated as of 2.0.0.
Solution 1:[1]
You can add this mutate statement in filter section. This works.
mutate {
add_field => { "[fields][event_time]" => "%{timestamp}" }
}
This will add current timestamp into this field.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Ajay Kewat |
