You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
As a user with Events that have keys with epoch milli timestamps, "{ "timestamp": 1687549774219 }, I would like to use the date processor to convert this timestamp to a date
Describe the solution you'd like
A new concept of built-in patterns for the date processor. So now, instead of just DateTimeFormatter patterns, the date processor will have a list of built in patterns such as epoch_milli, epoch_second, or epoch_nano. These patterns will work exactly the same as the regular date time patterns do. For example, the config will look like this
The date processor would first check if the timestamp is epoch milli, and if so it will convert it to a Date Time. If it wasn't found to be an epoch milli timestamp, then it will check for epoch_second, then finally the DateTime pattern.
Describe alternatives you've considered (Optional)
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered:
Supporting "epoch_nano" would be great as well if you're about to support these because it's something that can happen as well and I couldn't find good processor to convert a Nano to Milli (truncate the last 6 digits basically).
I was able to use Opensearch Dev Console to tell it to handle the Epoch Time in milliseconds (OS doesn't support Nanos) this way but it would be great to be able to do that in the Date Processor instead:
Is your feature request related to a problem? Please describe.
As a user with Events that have keys with epoch milli timestamps,
"{ "timestamp": 1687549774219 }
, I would like to use the date processor to convert this timestamp to a dateDescribe the solution you'd like
A new concept of built-in patterns for the date processor. So now, instead of just
DateTimeFormatter
patterns, the date processor will have a list of built in patterns such asepoch_milli
,epoch_second
, orepoch_nano
. These patterns will work exactly the same as the regular date time patterns do. For example, the config will look like thisThe date processor would first check if the timestamp is epoch milli, and if so it will convert it to a Date Time. If it wasn't found to be an epoch milli timestamp, then it will check for epoch_second, then finally the DateTime pattern.
Describe alternatives you've considered (Optional)
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
The text was updated successfully, but these errors were encountered: