Skip to content

Support for nanosecond timestamps (date_nanos) #1065

@segevfiner

Description

@segevfiner

Description of the issue:
Elasticsearch since v7 has added support for a date_nanos type, supporting timestamps with nanosecond resolution, but the ECS @timestamp is a date supporting only millisecond resolution.

It would be nice if ECS had official fields for storing nanosecond resolution timestamps that would also be properly supported by beats, beats modules and the configurations they preload into Kibana.

How this should interact with the existing required @timestamp field is something to be considered.

Any additional context or examples:
https://www.elastic.co/guide/en/ecs/current/ecs-base.html
https://www.elastic.co/guide/en/elasticsearch/reference/current/date_nanos.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestreadyIssues we'd like to address in the future.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions