# Streams regular expression on timestamp

**URL:** <https://community.graylog.org/t/streams-regular-expression-on-timestamp/10463>\
**Category:** Graylog Central (peer support)\
**Created:** [May 16, 2019, 1:07pm UTC](https://community.graylog.org/t/streams-regular-expression-on-timestamp/10463 "2019-05-16T13:07:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GuillaumeDB](https://avatars.discourse-cdn.com/v4/letter/g/9fc29f/32.png) [@GuillaumeDB](https://community.graylog.org/u/GuillaumeDB)\
**Post date:** [May 16, 2019, 1:07pm UTC](https://community.graylog.org/t/streams-regular-expression-on-timestamp/10463/1 "2019-05-16T13:07:48Z")

</div>

Hello,

I already post on the forum last months because I started with Graylog. Thanks to some of people here I succeeded to set up an infrastrucutre that my company (for few months because i’m in traineeship) use.

I will make a presentation soon of what I did but I would like to show a little more things such as regular expression that we can use. But I never used regex before. But I really want to set up one in a stream to stand out messages of the night when doors of the company are closed.

![regex](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/a/a776b632d7be5b8c387753d14a363fc9caf43689.png)

I want to take the field “timestamp” and say that for any date i will just take hour values (here “12:35:54”) but just keep messages where hour display is between 18:00:00 and 09:00:00.

Is it possible with regular expression ? I guess yes and if someone can lead me it will be great

Thanks a lot

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 30, 2019, 1:07pm UTC](https://community.graylog.org/t/streams-regular-expression-on-timestamp/10463/2 "2019-05-30T13:07:49Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
