Date processor

Serverless Stack GA 9.2.0

The date processor parses dates from fields, and then uses the date or timestamp as the timestamp for the document.

To extract a timestamp field using the date processor:

Select Create → Create processor.
Select Date from the Processor menu.
Set the Source Field to the field containing the timestamp.
Set the Format field to one of the accepted date formats (ISO8602, UNIX, UNIX_MS, or TAI64N) or use a Java time pattern. Refer to the example formats for more information.

This functionality uses the Elasticsearch date pipeline processor. Refer to the date processor Elasticsearch documentation for more information.

Example formats

The following list provides some common examples of date formats and how to parse them.

Common formats

  2025-04-04T09:04:45+00:00 => ISO8601 1618886400 => UNIX 1618886400123 => UNIX_MS 4000000049c9f0ca => TAI64N  

Custom formats

  2023-10-15 => yyyy-MM-dd 15/10/2023 => dd/MM/yyyy 10-15-2023 => MM-dd-yyyy 2023-288 => yyyy-DDD 15 Oct 2023 => dd MMM yyyy Sunday, October 15, 2023 => EEEE, MMMM dd, yyyy 2023-10-15T14:30:00Z => yyyy-MM-dd'T'HH:mm:ssX 2023-10-15 14:30:00 => yyyy-MM-dd HH:mm:ss  

Optional fields

You can set the following optional fields for the date processor in the Advanced settings:

Field	Description
Target field	The field that will hold the parsed date. Defaults to `@timestamp`.
Timezone	The timezone to use when parsing the date. Supports template snippets. Defaults to `UTC`.
Locale	The locale to use when parsing the date, relevant when parsing month names or weekdays. Supports template snippets. Defaults to `ENGLISH`.
Output format	The format to use when writing the date to `target_field`. Must be a valid Java time pattern. Defaults to `yyyy-MM-dd'T'HH:mm:ss.SSSXXX`.