[EEM] Change latest metric to use @timestamp (#190417)

## Summary

This PR closes
https://github.com/elastic/elastic-entity-model/issues/134 by changing
the timestamp for the latest metrics from `event.ingested` to
`@timestamp`.
This commit is contained in:
Chris Cowan 2024-08-14 12:03:40 -06:00 committed by GitHub
parent 761f5e7133
commit d6b151862d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 9 additions and 9 deletions

View file

@ -97,7 +97,7 @@ Object {
},
"filter": Object {
"range": Object {
"event.ingested": Object {
"@timestamp": Object {
"gte": "now-1m",
},
},
@ -114,7 +114,7 @@ Object {
},
"filter": Object {
"range": Object {
"event.ingested": Object {
"@timestamp": Object {
"gte": "now-1m",
},
},
@ -131,7 +131,7 @@ Object {
},
"filter": Object {
"range": Object {
"event.ingested": Object {
"@timestamp": Object {
"gte": "now-1m",
},
},
@ -148,7 +148,7 @@ Object {
},
"filter": Object {
"range": Object {
"event.ingested": Object {
"@timestamp": Object {
"gte": "now-1m",
},
},

View file

@ -85,7 +85,7 @@ describe('Generate Metadata Aggregations for history and latest', () => {
'entity.metadata.host.name': {
filter: {
range: {
'event.ingested': {
'@timestamp': {
gte: 'now-1m',
},
},
@ -111,7 +111,7 @@ describe('Generate Metadata Aggregations for history and latest', () => {
'entity.metadata.host.name': {
filter: {
range: {
'event.ingested': {
'@timestamp': {
gte: 'now-1m',
},
},
@ -137,7 +137,7 @@ describe('Generate Metadata Aggregations for history and latest', () => {
'entity.metadata.host.name': {
filter: {
range: {
'event.ingested': {
'@timestamp': {
gte: 'now-1m',
},
},
@ -163,7 +163,7 @@ describe('Generate Metadata Aggregations for history and latest', () => {
'entity.metadata.hostName': {
filter: {
range: {
'event.ingested': {
'@timestamp': {
gte: 'now-1m',
},
},

View file

@ -37,7 +37,7 @@ export function generateLatestMetadataAggregations(definition: EntityDefinition)
[`entity.metadata.${metadata.destination}`]: {
filter: {
range: {
'event.ingested': {
'@timestamp': {
gte: `now-${definition.history.interval}`,
},
},