{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/filebeat/issues/178","labels_url":"https://api.github.com/repos/elastic/filebeat/issues/178/labels{/name}","comments_url":"https://api.github.com/repos/elastic/filebeat/issues/178/comments","events_url":"https://api.github.com/repos/elastic/filebeat/issues/178/events","html_url":"https://github.com/elastic/filebeat/issues/178","id":114716134,"number":178,"title":"@timestamp that filebeat is sending is not understood by logstash","user":{"login":"coffeepac","id":677786,"avatar_url":"https://avatars.githubusercontent.com/u/677786?v=3","gravatar_id":"","url":"https://api.github.com/users/coffeepac","html_url":"https://github.com/coffeepac","followers_url":"https://api.github.com/users/coffeepac/followers","following_url":"https://api.github.com/users/coffeepac/following{/other_user}","gists_url":"https://api.github.com/users/coffeepac/gists{/gist_id}","starred_url":"https://api.github.com/users/coffeepac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coffeepac/subscriptions","organizations_url":"https://api.github.com/users/coffeepac/orgs","repos_url":"https://api.github.com/users/coffeepac/repos","events_url":"https://api.github.com/users/coffeepac/events{/privacy}","received_events_url":"https://api.github.com/users/coffeepac/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-11-03T00:30:58Z","updated_at":"2015-11-03T00:43:43Z","closed_at":"2015-11-03T00:43:43Z","body":"on the nightly from last night (11/1/2015) filebeat is sending the @timestamp value as a string, this is causing the logstash-2.0.0 input beats to drop the following error message:\r\n\r\n{:timestamp=>\"2015-11-03T00:21:47.613000+0000\", :message=>\"Beats input: unhandled exception\", :exception=>#<TypeError: The field '@timestamp' must be a (LogStash::Timestamp, not a String (2015-11-03T00:21:46.460Z)>, :backtrace=>[\"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/event.rb:138:in `[]='\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/logstash/inputs/beats.rb:138:in `create_event'\", \"org/jruby/RubyHash.java:1342:in `each'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/logstash/inputs/beats.rb:138:in `create_event'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-codec-plain-2.0.2/lib/logstash/codecs/plain.rb:35:in `decode'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/logstash/inputs/beats.rb:136:in `create_event'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/logstash/inputs/beats.rb:150:in `invoke'\", \"org/jruby/RubyProc.java:271:in `call'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:370:in `data'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:349:in `read_socket'\", \"org/jruby/RubyProc.java:271:in `call'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:361:in `ack_if_needed'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:345:in `read_socket'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:246:in `json_data_payload'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:163:in `feed'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:296:in `compressed_payload'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:163:in `feed'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:330:in `read_socket'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/lumberjack/beats/server.rb:315:in `run'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/logstash-input-beats-0.9.2/lib/logstash/inputs/beats.rb:150:in `invoke'\", \"org/jruby/RubyProc.java:271:in `call'\", \"/opt/logstash-2.0.0/vendor/bundle/jruby/1.9/gems/concurrent-ruby-0.9.1-java/lib/concurrent/executor/executor_service.rb:515:in `run'\", \"Concurrent$$JavaExecutorService$$Job_429565255.gen:13:in `run'\"], :level=>:error}\r\n\r\nThis error does not occur with filebeat-1.0.0-beta4."},"comment":{"url":"https://api.github.com/repos/elastic/filebeat/issues/comments/153205481","html_url":"https://github.com/elastic/filebeat/issues/178#issuecomment-153205481","issue_url":"https://api.github.com/repos/elastic/filebeat/issues/178","id":153205481,"user":{"login":"coffeepac","id":677786,"avatar_url":"https://avatars.githubusercontent.com/u/677786?v=3","gravatar_id":"","url":"https://api.github.com/users/coffeepac","html_url":"https://github.com/coffeepac","followers_url":"https://api.github.com/users/coffeepac/followers","following_url":"https://api.github.com/users/coffeepac/following{/other_user}","gists_url":"https://api.github.com/users/coffeepac/gists{/gist_id}","starred_url":"https://api.github.com/users/coffeepac/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coffeepac/subscriptions","organizations_url":"https://api.github.com/users/coffeepac/orgs","repos_url":"https://api.github.com/users/coffeepac/repos","events_url":"https://api.github.com/users/coffeepac/events{/privacy}","received_events_url":"https://api.github.com/users/coffeepac/received_events","type":"User","site_admin":false},"created_at":"2015-11-03T00:43:43Z","updated_at":"2015-11-03T00:43:43Z","body":"rad, that took care of it.\r\n\r\nClosing, thanks for the help @urso "}}