Skip to main content
Ent+
This feature is available as an add-on for the Honeycomb Enterprise plan. Please contact your Honeycomb account team for details.

​
Description

The Parse Timestamp Processor is designed to extract and standardize timestamps from specified fields in log, metric, or trace data. It ensures uniformity of timestamp data across different sources and formats, facilitating seamless analysis and correlation of time-series data.

​
Use

In environments where telemetry data comes in various timestamp formats or from different fields, uniformity in timestamp data is crucial for accurate analysis and monitoring. The Parse Timestamp Processor addresses this by allowing users to specify the source field and format, enabling the extraction and standardization of timestamps across diverse data types and sources.

​
Configuration

​
Example Configurations

​
Standardizing Log Timestamps

In this example, we configure the Parse Timestamp Processor to extract and standardize timestamps embedded within log messages. The log entries contain timestamps in various formats, and the goal is to normalize them for consistent analysis. Honeycomb Docs - Parse Timestamp - image 1 Sample log entry with a non-standard timestamp format:
The configuration for the Parse Timestamp Processor is set as follows:
  • Condition: "attributes['timestamp'] != nil"
  • Source FieldType: Attribute
  • Source Field: timestamp
  • Time Format: Manual
  • Manual Layout: %d/%m/%Y %H:%M:%S
As a result, the log entry is processed to extract and standardize the timestamp, transforming it into a consistent, machine-readable format for enhanced querying and analysis. Processed log entry:
This setup ensures that all timestamps, regardless of their original format, are standardized to facilitate accurate and efficient data analysis.