curl <elasticsearch_node>:<port>/_cat/indices?v
.[sts_internal_events-]yyyy.MM.dd
.curl <elasticsearch_node>:<port>/<index_name>/_mapping?pretty
. This returns the index mapping, which includes the format of any date values.date
.yyyy-MM-dd
for the date format date
.yyyy-MM-dd’T’HH:mm:ss[.SSS]ZZZZZ
for a timestamp pattern with millis that can have 1, 2 or 3 digits.*
) in telemetry query values. Note that wildcards can be used to filter for partial matches, it is not possible to use a full wildcard. At least one other character must be specified in the filter value.