Updated on 2024-09-19 GMT+08:00

Setting User-defined Log Time

When configuring log ingestion, you can enable User-defined log time to set a time field in the logs as the ingestion configuration time.

Enabling User-defined Log Time

  1. Log in to the LTS console. The Log Management page is displayed by default.
  2. Expand the target log group and click the name of the target stream.
  3. On the log stream details page, click in the upper right corner. On the page displayed, click the Cloud Structuring Parsing tab. For details, see Setting Cloud Structuring Parsing.
  4. After cloud structuring parsing is configured, enable User-defined log time and specify the following parameters.

    A time deviation may occur around the time displayed on the log search page when you enable or disable User-defined log time. Do not frequently enable or disable it.

    Table 1 Parameter configuration

    Parameter

    Description

    Example

    Key

    Name of an extracted field. You can select an extracted field from the drop-down list. The field is of the string or long type.

    test

    Value

    Value of an extracted field. After a Key is selected, the Value is automatically filled in.

    2022-07-19 12:12:00

    Format

    For details, see Common Log Time Formats.

    yyyy-MM-dd HH:mm:ss

    Operation

    Click Verify. If the message The time format is successfully matched with the time field value. is displayed, the verification is successful.

    -

Common Log Time Formats

Table 2 lists common log time formats.

By default, log timestamps in LTS are accurate to seconds. You do not need to configure information such as milliseconds and microseconds.

Table 2 Time formats

Format

Description

Example

EEE

Abbreviation for Week.

Fri

EEEE

Full name for Week.

Friday

MMM

Abbreviation for Month.

Jan

MMMM

Full name for Month.

January

dd

Number of the day in a month, ranging from 01 to 31 (decimal).

07, 31

HH

Hour, in 24-hour format.

22

hh

Hour, in 12-hour format.

11

MM

Number of the month, ranging from 01 to 12 (decimal).

08

mm

Number of the minute, ranging from 00 to 59 (decimal).

59

a

AM or PM

AM, PM

hh:mm:ss a

Time in the 12-hour format.

11:59:59 AM

HH:mm

Hour and minute format.

23:59

ss

Number of the second, ranging from 00 to 59 (decimal).

59

yy

Year without century, ranging from 00 to 99 (decimal).

04, 98

yyyy

Year (decimal).

2004, 1998

d

Number of the day in a month, ranging from 1 to 31 (decimal).

If the value is a single-digit number, add a space before the value.

7, 31

DDD

Number of the day in a year, ranging from 001 to 366 (decimal).

365

u

Number of the day in a week, ranging from 1 to 7 (decimal). The value 1 indicates Monday.

2

w

Number of the week in a year. Sunday is the start of a week. The value ranges from 00 to 53.

23

w

Number of the week in a year. Monday is the start of a week. The value ranges from 01 to 53.

A week is the first week of a month if it has at least four days in that month; otherwise, the following week is the first week.

24

U

Number of the day in a week, ranging from 0 to 6 (decimal). The value 0 indicates Sunday.

5

EEE MMM dd HH:mm:ss yyyy

Standard date and time.

Tue Nov 20 14:12:58 2020

EEE MMM dd yyyy

Standard date without time.

Tue Nov 20 2020

HH:mm:ss

Standard time without date.

11:59:59

%s

UNIX Timestamp.

147618725

Examples

Table 3 lists common time standards, examples, and expressions.

Table 3 Examples

Example

Time Expression

Time Standard

2022-07-14T19:57:36+08:00

yyyy-MM-dd'T'HH:mm:ssXXX

Custom

1548752136

%s

Custom

27/Jan/2022:15:56:44

dd/MMM/yyyy:HH:mm:ss

Custom

2022-08-15 17:53:23+08

yyyy-MM-dd HH:mm:ssX

Custom

2022-08-05T08:24:15.536+0000

yyyy-MM-dd'T'HH:mm:ss.SSSZ

Custom

2022-08-20T10:04:03.204000Z

yyyy-MM-dd'T'HH:mm:ss.SSSZ

Custom

2022-08-22T06:52:08Z

yyyy-MM-dd'T'HH:mm:ssZ

Custom

2022-07-24T10:06:41.000

yyyy-MM-dd'T'HH:mm:ss.SSS

Custom

[2022-12-11 15:05:07.012]

[yyyy-MM-dd HH:mm:ss.SSS]

Custom

Monday, 02-Jan-06 15:04:05 MST

EEEE, dd-MMM-yy HH:mm:ss Z

RFC850

Mon, 02 Jan 2006 15:04:05 MST

EEE, dd MMM-yyyy HH:mm:ss Z

RFC1123

02 Jan 06 15:04 MST

dd MMM yy HH:mm Z

RFC822

02 Jan 06 15:04 -0700

dd MMM yy HH:mm Z

RFC822Z

2023-01-02T15:04:05.999999999Z07:00

yyyy-MM-dd'T'HH:mm:ss Z

RFC3339Nano

2023-01-02T15:04:05Z07:00

yyyy-MM-dd'T'HH:mm:ss Z

RFC3339

2022-12-11 15:05:07

yyyy-MM-dd HH:mm:ss

Custom