topic Index time mapping in inputs.conf in Getting Data In

Index time mapping in inputs.conf

DataOrg — Fri, 27 Jul 2018 10:29:08 GMT

I have two fileds TIME and Last execution TIME.

In input.conf i have mapped TIME field to use a index time(_time) but in some cases it take the last execution TIME.

how to overcome this?

FrankVl — Fri, 27 Jul 2018 10:54:48 GMT

Can you please provide the actual config you have and also some sample data? I don't understand what you mean with mapping time in inputs.conf.

akocak — Fri, 27 Jul 2018 13:34:15 GMT

I think he means using indextime as timestamp in inputs.conf 🙂

FrankVl — Fri, 27 Jul 2018 13:51:59 GMT

That would still be controlled through props.conf and not inputs.conf, right?

thambisetty — Fri, 27 Jul 2018 14:14:32 GMT

yes you are right. I dont think we can control timestamp of event using inputs.conf.