在kibana-7.1.1中将日期格式从纪元更改为日期

Question

I am working on kibana-7.1.1. I want it to be interactive. I have one field of timestamp where field type is in epoch format.

But I want to filter data in date format.

I feel that I will have to insert data in date format rather than inserting in epoch format. Is there any other way that I insert data in epoch format(because my original data file is in this format.) but still I can use filter on date format?

Answer 1

Yes, this is possible. You possibly just need to change the mapping for this epoch field to date.

Elasticsearch is able to convert several date formats into a date mapped field just by guessing it. For special cases/date formats you're also able to specify a custom date pattern.

Please have a look on the documentation on this topic here: https://www.elastic.co/guide/en/elasticsearch/reference/current/date.html

Have Fun!