Timestamp/timestamp with forming 00:00:00 Help

[DuhBatista]

Hello friends,
Good afternoon. Could someone help me how to make the Timestamp/timestamp have the correct time instead of 00:00:00.
I would like the “message” time in this example to be 00:21:38.
For the other assets (inputs) everything is correct, but for this one in particular it is dated 00:00:00 -03:00

Sorry for English.

[gsmith]

My apologies, I didn’t know you post twice on this issue.

You want to close this out because I replied to you already here.

Make the Timestamp / timestamp get the correct time

@DuhBatista Hello, You posted in a 4.5 year old post. I moved your request to a NEW post. Hope you don’t mind. As for your timestamp issue. Unfortunately I don’t know how you setup up your Graylog environment but this could be a few different ways of correcting that, for instance take a look here… If your unsure what to post , please take a look here How to Post a Question in the Community that Gets Responses

[DuhBatista]

Hello friends, I come to bring the solution that a colleague from the Telegram group Graylog Brazil passed to solve the impasse and impact of Timestamp/timestamp with stamp 00:00:00
I’m using Graylog 3.3.14+13e45b7 on graylog (Private Build 1.8.0_292 on Linux 4.15.0-151-generic) VM.

Pipeline Rules

rule "timestamp_now+2"
when
    has_field("timestamp")
then
    let new_date = now(
        timezone: "America/Bahia");

    set_field("timestamp", new_date);
end

In the attached image, see that the timestamp is 00:00:00 after applying the filter, the message stamps correctly.

Thank you all for your attention

[gsmith]

@DuhBatista
Thanks for the update, if you could mark this as resolved for future searches that would be great