Doc: unsupported ns timestamp in ELK for log ordering

[gberche-orange]

https://github.com/cloudfoundry/cf-syslog-drain-release/blob/develop/README.md#log-ordering mentions

Diego uses a nanosecond based timestamp that can be ingested properly by both ELK and Splunk with the instructions linked.

However the referenced elastisearch date documentation only mentions milliseconds supports and elastic/elasticsearch#10005 explicitly mentions lack of nanosecond support.

Is this an issue in the documentation, or could the documentation be more precise about ELK nanos support (such as storing the seconds fraction in a distinct ES field than the date) ?

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/154954090

The labels on this github issue will be updated when the story is started.

[thepeterstone]

Hi @gberche-orange,

Thanks for pointing that out. We've updated the documentation to reflect ELK's millisecond-precision.

[gberche-orange]

thanks @thepeterstone