'Alternative to _timestamp in Elasticsearch

What is the best way to determine the last modified time for a record in Elastic Search? I don't mind storing it as a separate field, but setting it manually would require a great deal of extra overhead. In the past, I used _timestamp, but that has been deprecated as of 2.0.0.



Solution 1:[1]

You can add this mutate statement in filter section. This works.

mutate {
    add_field => { "[fields][event_time]" => "%{timestamp}" }

}

This will add current timestamp into this field.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Ajay Kewat