Hi Cristian, Maybe you know this, too, but you can change the default dashboard as well. You just have to configure a dashboard once, save it as JSON and replace the default.json dashboard (I hope I'm not messing up the name) that Kibana loads up by default.
Best regards, Radu -- Performance Monitoring * Log Analytics * Search Analytics Solr & Elasticsearch Support * http://sematext.com/ On Tue, Aug 12, 2014 at 10:16 AM, Cristian Falcas <[email protected]> wrote: > I' using the latter. I know I can change the timestamp field, but I wanted > to make the default useful, for the other users. It's not a very big deal, > probably this can be changed from the kibana code somewhere. > > > > On Tue, Aug 12, 2014 at 9:53 AM, Radu Gheorghe <[email protected] > > > wrote: > > > Hi Cristian, > > > > Do you have Logstash in the mix (hence the need for @timestamp) or do you > > use rsyslog -> ES -> Kibana? > > > > If it's the latter, I think you can change the "timestamping" from Kibana > > to whatever field contains a date. To do that (at least in version 3 or > > later), you'd go to the Dashboard settings on the upper-right, then go to > > Timepicker and change the "Time Field". For histogram panels, you also > have > > a Time Field somewhere in the settings. > > > > Best regards, > > Radu > > > > -- > > Performance Monitoring * Log Analytics * Search Analytics > > Solr & Elasticsearch Support * http://sematext.com/ > > > > > > On Tue, Aug 12, 2014 at 1:56 AM, Cristian Falcas < > [email protected]> > > wrote: > > > > > Hello, > > > > > > I can't find any way to set a field with name "@timestamp" in a json > > > template. > > > > > > Did anyone managed to set fields with non-ascii names? > > > > > > My conf is something like this: > > > template(name="es_template" type="subtree" subtree="$!") > > > set $!timestamp = $timereported; > > > set $!timegenerated = %timegenerated; > > > > > > and I would like to set it to this: > > > set $!@timestamp = $timereported; > > > > > > > > > Best regards, > > > Cristian Falcas > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
