# Pipeline parsing and setting correct timestamp

**URL:** <https://community.graylog.org/t/pipeline-parsing-and-setting-correct-timestamp/914>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules\
**Created:** [April 25, 2017, 8:38am UTC](https://community.graylog.org/t/pipeline-parsing-and-setting-correct-timestamp/914 "2017-04-25T08:38:46Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![bignjato](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/bignjato/32/502_2.png) [@bignjato](https://community.graylog.org/u/bignjato)\
**Post date:** [June 29, 2017, 2:38pm UTC](https://community.graylog.org/t/pipeline-parsing-and-setting-correct-timestamp/914/5 "2017-06-29T14:38:34Z")

</div>

I use this pipeline

> rule “parse event timestamp”  
> when  
> true  
> then  
> set\_field(“timestamp”,parse\_date(to\_string($message.test),“yyyy-MM-dd’T’hh:mm:ss.SSSZ”));  
> end

And extractor with name test from this message

2017-05-22T03:10:16+00:00 itc2000 daemon info itcTransceiver[1320]: SBCWorkflow: now 1970-Jan-03 17:50:18.831346 (0.-247636)

and I got extracted timestamp from message → test: 2017-05-22T03:10:16.000Z

Then with pipeline want to replace timeline with this data from test extractor.

---

_[View the full topic](https://community.graylog.org/t/pipeline-parsing-and-setting-correct-timestamp/914)._