The time_parser operator sets the timestamp on an entry by parsing a value from the body.
| Field | Default | Description |
|---|---|---|
id |
time_parser |
A unique identifier for the operator. |
output |
Next in pipeline | The connected operator(s) that will receive all outbound entries. |
parse_from |
required | The field from which the value will be parsed. |
layout_type |
strptime |
The type of timestamp. Valid values are strptime, gotime, and epoch. |
layout |
required | The exact layout of the timestamp to be parsed. |
if |
An expression that, when set, will be evaluated to determine whether this operator should be used for the given entry. This allows you to do easy conditional parsing without branching logic with routers. | |
on_error |
send |
The behavior of the operator if it encounters an error. See on_error. |
Several detailed examples are available here.