<p>In my <strong>Pipeline</strong> I extract a <em>timestamp</em>.
I would like to override the existing <em>timestamp</em> field.
How would I do this?</p>
<p>Pipeline:</p>
<pre><code>{
  &quot;description&quot;: &quot;...&quot;,
  &quot;processors&quot;: [
    {
      &quot;grok&quot;: {
        &quot;field&quot;: &quot;message&quot;,
        &quot;patterns&quot;: [
          &quot;{TIMESTAMP_ISO8601:timestamp2}&quot;
        ],
      }
    }
  ]
}
</code></pre>
<p>I would like <em>timestamp2</em> to override the original timestamp field.</p>

OultimoCoder
<p>You can simply override the field name like this:</p>
<pre><code>&quot;description&quot;: &quot;...&quot;,
&quot;processors&quot;: [
  {
    &quot;grok&quot;: {
      &quot;field&quot;: &quot;message&quot;,
      &quot;patterns&quot;: [
        &quot;%{TIMESTAMP_ISO8601:timestamp}&quot;    &lt;--- use timestamp here instead of timestamp2
      ]
    }
  }
]
</code></pre>
