You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like to see a possibility to add an option in the Elastic Agent to add a field event.created with the timestamp of ingestion of the event. That is, a timestamp before the other processors will be run.
That way we can see how long an event took to travel from the source to the agent (in case of a TCP input) and, when we add a field with a timestamp as last processor, we can actually see how long (all) the processors of a agent took to run.
I would be even nicer to be able to set it (optionally) in the input options of an integration.
I would like to see a possibility to add an option in the Elastic Agent to add a field
event.created
with the timestamp of ingestion of the event. That is, a timestamp before the other processors will be run.That way we can see how long an event took to travel from the source to the agent (in case of a TCP input) and, when we add a field with a timestamp as last processor, we can actually see how long (all) the processors of a agent took to run.
I would be even nicer to be able to set it (optionally) in the input options of an integration.
A diagram of the idea:
Edit: Clarified
The text was updated successfully, but these errors were encountered: