date_format

date_format #

CategoryScope
Parsingrecord

The “date_format” pipeline processor: the output direction Graylog’s format_date covers — read a timestamp field (already normalized by date, or RFC3339-ish) and render it in any layout/timezone.

Configuration #

FieldTypeDefaultDescription
sourcestringSource field to read from.
target_fieldstring“formatted_time”Destination field to write the result to.
to_timezonestringTimezone the timestamp is rendered in.
to_formatstringOutput layout of the rendered timestamp.

Example #

processor:
  - date_format:
      source: "message"
      target_field: "parsed"
      to_timezone: "to_timezone"
      to_format: "to_format"
Edit Edit this page