[functionbeat] [kinesis] use record timestamp instead of current time (…

…#33593) * use record timestamp * add changelog entry
elastic · Jun 1, 2023 · 28a0d1d · 28a0d1d
1 parent 16cacf8
commit 28a0d1d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -113,6 +113,7 @@ https://github.com/elastic/beats/compare/v8.2.0\...main[Check the HEAD diff]
 
 *Functionbeat*
 
+- Fix Kinesis events timestamp to use timestamp of the event record instead of when the record was processed {pull}33593[33593]
 
 
 *Elastic Logging Plugin*

diff --git a/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go b/x-pack/functionbeat/provider/aws/aws/transformer/transformer.go
@@ -103,7 +103,7 @@ func KinesisEvent(request events.KinesisEvent) ([]beat.Event, error) {
 
 		for _, deaggRecord := range deaggRecords {
 			beatEvents = append(beatEvents, beat.Event{
-				Timestamp: time.Now(),
+				Timestamp: *deaggRecord.ApproximateArrivalTimestamp,
 				Fields: mapstr.M{
 					"event": mapstr.M{
 						"kind": "event",