@@ -13,23 +13,31 @@ The purpose of this filter is to make sure the @timestamp field exists in the
1313record which is necessary for the record to be indexed properly by
1414elasticsearch.
1515
16- * If * @timestamp * field already exists, it will ensure the format is correct
16+ * If ` @timestamp ` field already exists, it will ensure the format is correct
1717 by parse and convert to format '%Y-%m-%dT%H:%M:%S%z'. ** As of version 0.2.4, it
1818 will support epoch second / epoch millis format as a valid timestamp value. If
1919 such value is detected, it will be converted to iso8601 format for easier
2020 consumption of elasticsearch when dynamic mapping is used.**
2121
22- * If a field named * timestamp* or * time* or * syslog_timestamp* exists, it will
23- parse that field and conver it to format '%Y-%m-%dT%H:%M:%S%z' then store it
24- in * @timestamp * field.
22+ * If a field named ` timestamp ` or ` time ` or ` syslog_timestamp ` exists, it will
23+ parse that field and conver it to format '%Y-%m-%dT%H:%M:%S.%L%z' then store it
24+ in ` @timestamp ` field. In addition, a field ` fluent_converted_timestamp `
25+ is added to the object with the same value.
2526
2627* If none of the above field exists, it will insert current time in
27- '%Y-%m-%dT%H:%M:%S%z' format as the * @timestamp * field.
28+ '%Y-%m-%dT%H:%M:%S.%L%z' format as the ` @timestamp ` field. A field
29+ ` fluent_added_timestamp ` is added to the object with same value.
30+
31+ ## (>=0.2.6) Subsecond Precision
32+
33+ ` subsecond_precision ` controls the subsecond precision during the conversion.
34+ Default value is set to ` 3 ` (millisecond).
2835
2936## Usage
3037
3138```
3239<filter **>
3340 type elasticsearch_timestamp_check
41+ subsecond_precision 3
3442</filter>
3543```
0 commit comments