time stamp rule with no date data

stephenM — Mon, 16 Dec 2024 21:50:37 GMT

I have a log that does not contain any date data, only a time stamp. when I try to create a time stamp processing rule it won't let me save it saying I am missing month and day.

How can I get the time to be recognized correctly?

Re: time stamp rule with no date data

RohitBisht — Tue, 17 Dec 2024 04:40:14 GMT

Hi Stephen,

Dynatrace needs both date and time in the timestamp to recognize it correctly. My recommendation is to fix the timestamp from the source. However if it is not possible, i have worked on this processing rule which can append the current date to the timestamp.

After creating this rule either it will be autodetected or you can create a timestamp rule. Cheers!
USING(INOUT content)
|FIELDS_ADD(DAY(now()),MONTH(now()),year(now()))
| FIELDS_ADD(date: CONCAT(year, month, day))
| FIELDS_ADD(content: concat(date, " ", content))

topic Re: time stamp rule with no date data in Log Analytics

time stamp rule with no date data

Re: time stamp rule with no date data