{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/filebeat/issues/120","labels_url":"https://api.github.com/repos/elastic/filebeat/issues/120/labels{/name}","comments_url":"https://api.github.com/repos/elastic/filebeat/issues/120/comments","events_url":"https://api.github.com/repos/elastic/filebeat/issues/120/events","html_url":"https://github.com/elastic/filebeat/issues/120","id":112533202,"number":120,"title":"Sending data through logstash leads to two timestamp fields","user":{"login":"ruflin","id":244900,"avatar_url":"https://avatars.githubusercontent.com/u/244900?v=3","gravatar_id":"","url":"https://api.github.com/users/ruflin","html_url":"https://github.com/ruflin","followers_url":"https://api.github.com/users/ruflin/followers","following_url":"https://api.github.com/users/ruflin/following{/other_user}","gists_url":"https://api.github.com/users/ruflin/gists{/gist_id}","starred_url":"https://api.github.com/users/ruflin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruflin/subscriptions","organizations_url":"https://api.github.com/users/ruflin/orgs","repos_url":"https://api.github.com/users/ruflin/repos","events_url":"https://api.github.com/users/ruflin/events{/privacy}","received_events_url":"https://api.github.com/users/ruflin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-10-21T08:15:39Z","updated_at":"2015-10-26T17:59:02Z","closed_at":null,"body":"Sending data from filebeat to logstash to elasticsearch leads to two timestamp fields\r\n\r\n* timestamp (coming from filebeat)\r\n* @timestamp (coming from ?)\r\n\r\nThe timestamps are not identical. I assume logstash adds the @timestamp.\r\n\r\nQuestions:\r\n* Should we keep both timestamps? \r\n* Do we need both timestamps?\r\n\r\nIt makes the setup of the Kibana dashboard a little bit less obvious as two fields pop up:\r\n\r\n![screen shot 2015-10-21 at 10 01 04](https://cloud.githubusercontent.com/assets/244900/10631197/913ee35c-77dc-11e5-94b5-812abfead53b.png)\r\n"},"comment":{"url":"https://api.github.com/repos/elastic/filebeat/issues/comments/151227767","html_url":"https://github.com/elastic/filebeat/issues/120#issuecomment-151227767","issue_url":"https://api.github.com/repos/elastic/filebeat/issues/120","id":151227767,"user":{"login":"urso","id":75886,"avatar_url":"https://avatars.githubusercontent.com/u/75886?v=3","gravatar_id":"","url":"https://api.github.com/users/urso","html_url":"https://github.com/urso","followers_url":"https://api.github.com/users/urso/followers","following_url":"https://api.github.com/users/urso/following{/other_user}","gists_url":"https://api.github.com/users/urso/gists{/gist_id}","starred_url":"https://api.github.com/users/urso/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/urso/subscriptions","organizations_url":"https://api.github.com/users/urso/orgs","repos_url":"https://api.github.com/users/urso/repos","events_url":"https://api.github.com/users/urso/events{/privacy}","received_events_url":"https://api.github.com/users/urso/received_events","type":"User","site_admin":false},"created_at":"2015-10-26T17:59:02Z","updated_at":"2015-10-26T17:59:02Z","body":"I think there's a general confusion about @timestamp vs timestamp in general. We should just have one."}}