elasticsearch - Custom date format for only 1 index -
i want define custom date format 1 index.
actually, have @timestamp
field in index in following format,
`25/jul/2017:12:41:18 +0530`
and elasticsearch has stored string instead of datetime.
my other indices in elasticsearch have @timestamp
field in correct format i.e, 2017-07-25t15:46:37+05:30
.
so, want declare custom format 1 index, other indices should not affected. can ? if yes, please help.
you apply custom date format in mapping of specific index (https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-date-format.html):
i start this: "format": "dd/mmm/yyyy:hh:mm:ss z"
Comments
Post a Comment