Timestamp/timestamp with forming 00:00:00 Help

Hello friends,
Good afternoon. Could someone help me how to make the Timestamp/timestamp have the correct time instead of 00:00:00.
I would like the “message” time in this example to be 00:21:38.
For the other assets (inputs) everything is correct, but for this one in particular it is dated 00:00:00 -03:00

Sorry for English.

My apologies, I didn’t know you post twice on this issue.

You want to close this out because I replied to you already here.

Hello friends, I come to bring the solution that a colleague from the Telegram group Graylog Brazil passed to solve the impasse and impact of Timestamp/timestamp with stamp 00:00:00
I’m using Graylog 3.3.14+13e45b7 on graylog (Private Build 1.8.0_292 on Linux 4.15.0-151-generic) VM.

Pipeline Rules

rule "timestamp_now+2"
    let new_date = now(
        timezone: "America/Bahia");

    set_field("timestamp", new_date);

In the attached image, see that the timestamp is 00:00:00 after applying the filter, the message stamps correctly.

Thank you all for your attention

Thanks for the update, if you could mark this as resolved for future searches that would be great :+1:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.