Parse Timestamp
A bundle of processors for parsing a timestamp with regex.
Included Processors
1
Parse Regex
Extracts a timestamp field from the log body using a regex pattern. This processor searches the body for a timestamp in the format timestamp: value, and creates a new field named 'timestamp' that can be parsed by the Parse Timestamp processor.
2
Parse Timestamp
Converts the extracted timestamp string into a proper timestamp format. This processor takes the 'timestamp' field and converts it into a valid timestamp in the log body.
3
Delete Fields
Removes the original timestamp field after it has been parsed.
Example Telemetry
Log
| Name | Before | After |
|---|---|---|
| observed_time | 2026-03-11T08:15:00Z | 2026-03-11T08:15:00Z |
| time | 2026-03-11T08:15:00Z | 2025-09-22T14:30:45Z |
| severity_text | INFO | INFO |
| severity_number | 9 | 9 |
Body
{"level":"info","timestamp":"2025-09-22T14:30:45Z","message":"User session started","session_id":"abc-123"}{"level":"info","timestamp":"2025-09-22T14:30:45Z","message":"User session started","session_id":"abc-123"}Resource
| Name | Before | After |
|---|---|---|
| host.name | app-server-01 | app-server-01 |
| service.name | example-service | example-service |