@timestamp field format in Graylog GUI Search doesn't show as UTC ISO8601 sent by filebeat beat

[gsmith]

@armesh

so that is why it is auto formatting it into other format.

yes, depending on what you want to do.

You can check that link out , there are multipe way to adjust timestamp.

@gsmith

, you can check it out here

EDIT: I forgot to add, so if you want to change date --> string you need to go into Elasticsearch/Opensearch find you @timestamp field, a custom template is perfered.

Example:

{
  "winlogbeat-2023.04.27": {
    "mappings": {
      "@timestamp": {
        "full_name": "@timestamp",
        "mapping": {
          "@timestamp": {
            "type": "date"
          }
        }
      }
    }
  }
}

TBH it will take some work.