From 6606eea38a9d2620cee0b811e01fb592adb54349 Mon Sep 17 00:00:00 2001 From: Gabriel Pop Date: Mon, 7 Nov 2022 13:37:34 +0200 Subject: [PATCH 1/2] use record timestamp --- x-pack/functionbeat/provider/aws/aws/transformer/transformer.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go b/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go index 54b46e70b93..3bf464317a0 100644 --- a/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go +++ b/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go @@ -103,7 +103,7 @@ func KinesisEvent(request events.KinesisEvent) ([]beat.Event, error) { for _, deaggRecord := range deaggRecords { beatEvents = append(beatEvents, beat.Event{ - Timestamp: time.Now(), + Timestamp: *deaggRecord.ApproximateArrivalTimestamp, Fields: mapstr.M{ "event": mapstr.M{ "kind": "event", From 2e3dc5cf6915d26b430e0ee0931ca584c171ec6d Mon Sep 17 00:00:00 2001 From: Gabriel Pop Date: Mon, 7 Nov 2022 14:39:29 +0200 Subject: [PATCH 2/2] add changelog entry --- CHANGELOG.next.asciidoc | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 1617c6b27df..950b55ee9e2 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -98,6 +98,7 @@ https://github.com/elastic/beats/compare/v8.2.0\...main[Check the HEAD diff] *Functionbeat* +- Fix Kinesis events timestamp to use timestamp of the event record instead of when the record was processed {pull}33593[33593] *Elastic Logging Plugin*