entry['@timestamp'] = entry.time; please make it an option, since ES deprecared usage of @timestamp. and then I could set it to 'timestamp' easily.