@@ -13,23 +13,31 @@ The purpose of this filter is to make sure the @timestamp field exists in the
13
13
record which is necessary for the record to be indexed properly by
14
14
elasticsearch.
15
15
16
- * If * @timestamp * field already exists, it will ensure the format is correct
16
+ * If ` @timestamp ` field already exists, it will ensure the format is correct
17
17
by parse and convert to format '%Y-%m-%dT%H:%M:%S%z'. ** As of version 0.2.4, it
18
18
will support epoch second / epoch millis format as a valid timestamp value. If
19
19
such value is detected, it will be converted to iso8601 format for easier
20
20
consumption of elasticsearch when dynamic mapping is used.**
21
21
22
- * If a field named * timestamp* or * time* or * syslog_timestamp* exists, it will
23
- parse that field and conver it to format '%Y-%m-%dT%H:%M:%S%z' then store it
24
- in * @timestamp * field.
22
+ * If a field named ` timestamp ` or ` time ` or ` syslog_timestamp ` exists, it will
23
+ parse that field and conver it to format '%Y-%m-%dT%H:%M:%S.%L%z' then store it
24
+ in ` @timestamp ` field. In addition, a field ` fluent_converted_timestamp `
25
+ is added to the object with the same value.
25
26
26
27
* If none of the above field exists, it will insert current time in
27
- '%Y-%m-%dT%H:%M:%S%z' format as the * @timestamp * field.
28
+ '%Y-%m-%dT%H:%M:%S.%L%z' format as the ` @timestamp ` field. A field
29
+ ` fluent_added_timestamp ` is added to the object with same value.
30
+
31
+ ## (>=0.2.6) Subsecond Precision
32
+
33
+ ` subsecond_precision ` controls the subsecond precision during the conversion.
34
+ Default value is set to ` 3 ` (millisecond).
28
35
29
36
## Usage
30
37
31
38
```
32
39
<filter **>
33
40
type elasticsearch_timestamp_check
41
+ subsecond_precision 3
34
42
</filter>
35
43
```
0 commit comments