Pipeline. Timestamp dont change

Hello!
I have gelf input in docker graylog 3.3.10
Graylog received JSON - extract normal.
But when i try to change timestamp from datetime(value in JSON) i cant see result
JSON
{“datetime”:“2021-05-24 12:41:04.049 +00:00”,“log_level”:“INFO”,“message”:“Id = xxxxxxxx deleted”,“message_template”:“Id = {PropertyId} deleted”,“properties”:{“PropertyId”:xxxxxxxx}}

My pipeline rule
rule “change_timestamp”
when
true
then
let new_datetime = parse_date(to_string($message.datetime), “yyyy-MM-dd HH:mm:ss.SSS Z”);
set_field(“timestamp”, result);
end

Thank for helps

You have one mistake in your pipeline rule:
set_field("timestamp", result);

It should be:
set_field("timestamp", new_datetime);

sorry I just tired.
My pipeline is

rule “change_timestamp”
when
true
then
let new_datetime = parse_date(to_string($message.datetime), “yyyy-MM-dd HH:mm:ss.SSS Z”);
set_field(“timestamp”, new_datetime);
end

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.