Hello,
I cannot add elasticsearch data source for metrics-staging-2018-11-21 index, got no date field named @timestamp found. (i even tried @timestamp/timestamp/dequeue_timestamp ).
My index as show below:
{
“metrics-staging-2018-11-21”: {
“aliases”: {},
“mappings”: {
“stats”: {
“properties”: {
“data”: {
“properties”: {
“beat”: {
“properties”: {
“memstats”: {
“properties”: {
“gc_next”: {
“type”: “long”
},
“memory_alloc”: {
“type”: “long”
},
“memory_total”: {
“type”: “long”
}
}
}
}
},
“filebeat”: {
“properties”: {
“harvester”: {
“properties”: {
“bytes”: {
“properties”: {
“processed”: {
“type”: “long”
}
}
},
“messages”: {
“properties”: {
“processed”: {
“type”: “long”
}
}
},
“open_files”: {
“type”: “long”
},
“running”: {
“type”: “long”
},
“started”: {
“type”: “long”
}
}
}
}
},
“kafkarest”: {
“properties”: {
“messages”: {
“properties”: {
“sent”: {
“type”: “long”
}
}
}
}
},
“libbeat”: {
“properties”: {
“publisher”: {
“properties”: {
“published_events”: {
“type”: “long”
}
}
}
}
},
“publish”: {
“properties”: {
“events”: {
“type”: “long”
}
}
},
“registrar”: {
“properties”: {
“states”: {
“properties”: {
“cleanup”: {
“type”: “long”
},
“current”: {
“type”: “long”
},
“update”: {
“type”: “long”
}
}
},
“writes”: {
“type”: “long”
}
}
}
}
},
“header”: {
“properties”: {
“@timestamp”: {
“type”: “date”
},
“collector”: {
“type”: “text”,
“fields”: {
“keyword”: {
“type”: “keyword”,
“ignore_above”: 256
}
}
},
“dequeue_timestamp”: {
“type”: “date”
},
“upload_ids”: {
“type”: “text”,
“fields”: {
“keyword”: {
“type”: “keyword”,
“ignore_above”: 256
}
}
}
}
},
“index”: {
“type”: “text”,
“fields”: {
“keyword”: {
“type”: “keyword”,
“ignore_above”: 256
}
}
},
“type”: {
“type”: “text”,
“fields”: {
“keyword”: {
“type”: “keyword”,
“ignore_above”: 256
}
}
}
}
}
},
“settings”: {
“index”: {
“creation_date”: “1542829590344”,
“number_of_shards”: “5”,
“number_of_replicas”: “1”,
“uuid”: “NcYnKnG3RzChZdpbZVx8Qg”,
“version”: {
“created”: “5040299”
},
“provided_name”: “metrics-staging-2018-11-21”
}
}
}
}