将unix纳秒转换为弹性搜索日期时间字段时遇到麻烦。请让我知道如何创建索引和导入此数据。
{
"mappings": {
"doc": {
"properties": {
"CacheCacheStatus": {"type": "string"},
"CacheResponseBytes": {"type": "integer"},
"CacheResponseStatus": {"type": "integer"},
"CacheTieredFill":{"type": "boolean"},
"EdgeStartTimestamp": {"type": "date"}
}
}
}
}
数据
{"index":{"_index":"cloudflare-2018.09.01","_type":"log"}}
{"CacheCacheStatus":"unknown","CacheResponseBytes":32707,"CacheResponseStatus":200,"CacheTieredFill":false,"EdgeStartTimestamp":1535759910756000000}
{"index":{"_index":"cloudflare-2018.09.01","_type":"log"}}
{"CacheCacheStatus":"unknown","CacheResponseBytes":42537,"CacheResponseStatus":200,"CacheTieredFill":false,"EdgeStartTimestamp":1535759912213999872}
当导入弹性搜索时,我的错误率将下降。
{
"create" : {
"_index" : "cloudflare-2018.09.01",
"_type" : "log",
"_id" : "AWX7EQH50J_kGrzSCN-5",
"status" : 400,
"error" : {
"type" : "mapper_parsing_exception",
"reason" : "failed to parse [EdgeStartTimestamp]",
"caused_by" : {
"type" : "illegal_argument_exception",
"reason" : "Invalid format: \"1535759912620000000\" is malformed at \"759912620000000\""
}