Elicsearch: The value of the @ symbol

Question

Therefore, I could not find anything in the Elasticsearch documentation regarding the value of using a prefix @for field names (if there is a document about this, my question may have a simple answer).

I saw that it was used in the cases when the field is something about a log line - a simple example @timestamp, in the case of magazines AWS Cloudwatchon AWS Elasticsearch Serviceit sends things like @log_group, @idetc.

It would be interesting to know if using a character is @just a naming convention (someone decided to distinguish the meta-information of the log line from the corresponding fields) or if there is any functional difference in prefixing the field name with @.

Any insights (or answers)?

Answer 1

In fact, I cannot find the official documentation about this in Elasticsearch, but I found that some libraries that use Elasticsearch results are indicated @as annotations to indicate what _timestamp is, for example.

For example, as explained in this issue , Grafana uses the @timestampdefault annotation , and if you use a custom timestamp you will need to specify them.

Answer 2

@ doesn't really matter inside Elasticsearch.

Logstash uses this convention to define metadata fields for events such as @timestampand @version.

Answer 3

logstash asticsearch . , , . 100%,