is @timestamp field works? about fluent-plugin-elasticsearch

[jeesim2]

I'm sorry I'm new to mark down.

[dterror-zz]

Hi, what version of the plugin are you using? and also, can you post what your configuration looks like?

[jeesim2]

thanks!

version

[test@testbin]$ fluent-gem list
*** LOCAL GEMS ***
elasticsearch (0.4.11)
elasticsearch-api (0.4.11)
elasticsearch-transport (0.4.11)
fluent-plugin-elasticsearch (0.3.0)
fluentd (0.10.53, 0.10.48)
fluentd-ui (0.2.0)

configuration

<source>
  type http
  port 18888
  bind 0.0.0.0
  body_size_limit 32m
  keepalive_timeout 10s
</source>

<match dodol.summary.real>
  type elasticsearch
  logstash_format true
  logstash_prefix summary
  logstash_dateformat %Y
  utc_index false
  host 10.98.168.207 
  port 9200 
</match>

[jeesim2]

I tried on lasted version of plugin.
then @timestamp value of the json indexed to elasticsearch @timestamp field correctly :)

but the type of @timestamp created as string.
should I set a mapping to @timestamp field before index? like this?

{
  "@timestamp": {    "type" : "date",   "format" : "yyyy/MM/dd HH:mm:ss"}
}

when I send a timestamp(unix time) parameter to fluent http source
timestamp indexed as date field

# data to fluentd
'http://localhost:18888/my.tag?time=123908213&json=~~~~

# index mapping created automatically
"@timestamp" : {
"format" : "dateOptionalTime",
"type" : "date"
},

[jeesim2]

OK,
It was also my fault.
@timestamp format was wrong.

this is right

2014-04-07T000:00:00-00:00

instead of

2014-04-07T00:00:00-00:00

please check the document timestamp format

By default, when inserting records in logstash format, @timestamp is dynamically created with the time at log ingestion. If you'd like to use a custom time. Include an @timestamp with your record.
{"@timestamp":"2014-04-07T000:00:00-00:00"}

[dterror-zz]

Thanks @jeesim2