diff --git a/src/main/java/net/geedge/asw/module/runner/util/PcapParserThread.java b/src/main/java/net/geedge/asw/module/runner/util/PcapParserThread.java index 4f04b95..9e223c8 100644 --- a/src/main/java/net/geedge/asw/module/runner/util/PcapParserThread.java +++ b/src/main/java/net/geedge/asw/module/runner/util/PcapParserThread.java @@ -345,22 +345,23 @@ public class PcapParserThread implements Runnable { .properties("version", Property.of(p2 -> p2.keyword(k -> k)))) ) ) - .properties("ts", Property.of(p -> p.keyword(f -> f))) + .properties("ts", Property.of(p -> p.float_(f -> f))) + .properties("time", Property.of(p -> p.keyword(f -> f))) .properties("tunnel_parents", Property.of(p -> p.text(t -> t))) .properties("uid", Property.of(p -> p.keyword(k -> k))) ); openSearchClient.indices().create(createIndexRequestBuilder.build()); // upload data in bulk - DateTimeFormatter timeFormatter = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss.SSS"); + DateTimeFormatter timeFormatter = DateTimeFormatter.ofPattern("yyyy-MM-dd'T'HH:mm:ss.SSSZ"); BulkRequest.Builder br = new BulkRequest.Builder(); for (int i = 0; i < jsonArray.size(); i++) { JSONObject jsonObject = (JSONObject) jsonArray.get(i); // 时间戳格式转换 - String ts = jsonObject.getString("ts"); - jsonObject.put("ts", this.convertTsToFormatDate(timeFormatter, ts)); + String formatDate = this.convertTsToFormatDate(timeFormatter, jsonObject.getString("ts")); + jsonObject.put("time", formatDate); String id = String.valueOf(i); br.operations(op -> op.index(