I am newbie of fluentd , recently I use fluentd to gather nginx logs using in_tail.
As first , I feel strange that why there is not time field within the nginx log record in ES .
After digging it for quite a lot of time , I find that keep_time_key true must to be set to keep times field .
My questions are that:
timestamp is so important, why the default vaule of keep_time_key would be false
Hi
I am newbie of fluentd , recently I use fluentd to gather nginx logs using in_tail. As first , I feel strange that why there is not time field within the nginx log record in ES . After digging it for quite a lot of time , I find that
keep_time_key true
must to be set to keep times field .My questions are that: timestamp is so important, why the default vaule of
keep_time_key
would be falseThank you !