You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/send-data/opentelemetry-collector/remote-management/source-templates/otrm-time-reference.md
+2-4Lines changed: 2 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,6 @@ keywords:
6
6
- time
7
7
- time reference
8
8
- timezone
9
-
- timezone
10
9
- time zone
11
10
---
12
11
@@ -18,14 +17,13 @@ We support several options for handling timestamps, time zones, and date formats
18
17
19
18
This guide covers timestamp parsing behavior, configuration, and troubleshooting specific to OTRM. If you're using traditional Sumo Logic sources (not OTRM), refer to the general [Time Reference documentation](/docs/send-data/reference-information/time-reference/).
20
19
21
-
When collecting log data, the timestamp attached to messages is critical for data integrity and accurate search results. Sumo Logic indexes the timestamp of each message to ensure results fall within the query’s time range, allowing you to reconstruct event timelines reliably.
22
20
When collecting log data, the timestamp attached to messages is critical for data integrity and accurate search results. Sumo Logic indexes the timestamp of each message to ensure results fall within the query’s time range, allowing you to reconstruct event timelines reliably.
23
21
24
22
## Timestamps
25
23
26
24
Timestamp is the part of a log message that marks the time that an event occurred. During ingestion, we can detect the message timestamp, convert it to Unix epoch time (the number of milliseconds since midnight, January 1, 1970 UTC), and index it. The timestamp is parsed either using the default timestamp parsing settings, or a custom format that you specify, including the time zone.
27
25
28
-
When configuring a source template, specify a custom format to parse timestamps in your log messages.
26
+
When configuring a source template, you can specify a custom format to parse timestamps in your log messages.
29
27
30
28
:::note
31
29
Currently, only `strptime` timestamps are supported in the source templates.
@@ -46,7 +44,7 @@ OpenTelemetry Collectors can automatically parse most timestamps without any is
46
44
47
45
1. Perform one of the following steps:
48
46
* If you're configuring a new Source template, proceed to Step 2. Or,
49
-
* To edit the timestamp settings for an existing Source template, navigate tothe source template. Then click on **Edit**, to the right of the Source name and go to Step 2.<br/><img src={useBaseUrl('img/send-data/source-template-edit.png')} alt="Screenshot showing the editing interface for a source template in Sumo Logic, highlighting the section for editing advanced options including timestamp settings" style={{border: '1px solid gray'}} width="400"/>
47
+
* To edit the timestamp settings for an existing Source template, navigate tothe source template. Then click **Edit** to the right of the Source name and go to Step 2.<br/><img src={useBaseUrl('img/send-data/source-template-edit.png')} alt="Screenshot showing the editing interface for a source template in Sumo Logic, highlighting the section for editing advanced options including timestamp settings" style={{border: '1px solid gray'}} width="400"/>
50
48
1. Navigate to the **Timestamp Parsing** section and select **Specify the format** and enter the below details:
51
49
1.**Select Timezone**. Define the geographic location (time zone) to use while parsing a timestamp that does not include a time zone. The available locations depend on the local IANA Time Zone database. For example, `America/New_York`. For more examples, refer to the [List of tz database time zones](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones).
52
50
1.**Format**. Specify the exact layout of the timestamp to be parsed. For example, `- %Y-%m-%dT%H:%M:%S.%LZ`. To learn more about the formatting rules, refer to [this guide](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/internal/coreinternal/timeutils/internal/ctimefmt/ctimefmt.go#L68).
0 commit comments