Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential issue on @timestamp formats #40

Open
lucasponce opened this issue Apr 4, 2017 · 0 comments
Open

Potential issue on @timestamp formats #40

lucasponce opened this issue Apr 4, 2017 · 0 comments

Comments

@lucasponce
Copy link

According to the template description:
https://github.com/ViaQ/elasticsearch-templates/blob/master/namespaces/_default_.yml#L17
The @timestamp field is parsed from a string with a possible pattern as
"yyyy-MM-dd'T'HH:mm:ss.SSSSSSZ"
Working in the integration plugins for Hawkular I realized about a potential problem on this.
For example:
"2017-04-03T18:05:35.415123+0200"
The field 415123 would be considered in Java as 415 seconds and 123 milliseconds with the pattern SSSSSSZ instead of 415 milliseconds and 123 nanoseconds as I think it should be parsed.
I am fixing this on Hawkular Alerting plugins but just leaving a note here as this potencial issue happens without hitting any exception (as the parsed is correct but with wrong calculation), but once I looked in detail I realized there was some unexpected drifts on the timestamps.

I haven't investigated if Elasticsearch is also affected by this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant