Repository navigation
[Documentation] Example of the @timestamp datetime format when creating documents: DateTimeFormatter.ISO_DATE_TIME.format(OffsetDateTime.now()) #209
Description
Description
It's quite easy to shoot yourself in the foot with the @timestamp date format and Kibana returns no data without assistance to identify the problem.
Can you please provide an example to create a document including a @timestamp field?
Note that I eventually fixed my problem using DateTimeFormatter.ISO_DATE_TIME.format(OffsetDateTime.now()).
Example of the mistake I did:
- Create an index specifying the
datetype for the@timestampfield - Used the Elasticsearch Java client to insert a document setting
@timestamptoLocalDateTime.now().toString()(⚠️ LocalDateTimeis wrong,@timestamprequires a timezone, useDateTimeFormatter.ISO_DATE_TIME.format(OffsetDateTime.now())
- The document was successfully inserted
- Verify the document was successfully inserted retrieving it using the Elasticsearch APIs
- Try and fail to visualize in Kibana Discover.
- We discovered that the cause was the invalid format of
@timestampthat was lacking of a timezone, it didn't work with the range query of Kibana Discover:
{
"range":{
"@timestamp":{
"format":"strict_date_optional_time",
"gte":"1923-03-18T13:16:11.509Z",
"lte":"2022-03-18T12:16:11.509Z"
}
}
}FYI @rayafratkina helped me to figure out this problem
Reacted by Didem Öztunç, Alexandru Cristu and Cyril
Activity
[-][Documentation] Example of the`@timestamp` datetime format when creating documents[/-][+][Documentation] Example of the `@timestamp` datetime format when creating documents: `DateTimeFormatter.ISO_DATE_TIME.format(OffsetDateTime.now())`[/+]EffectShapiro commentedon Nov 30, 2022
Kind of same issue here
I am able to index document with this timestamp
I am also allowed to setup an index pattern using this field as timeField for Kibana
But then in the Discover tab i get no result :( inspecting the query reveal that the format is wrong
When replacing with
I get the results
@cyrille-leclerc did you find a way ?