CloudWatch > Log Events > Actions > "Download search results (CSV)" - issue with downloaded file's format for the "Time Stamp" column in the CSV

0

Hi re:Post Support!

CloudWatch > Log Events > Actions > "Download search results (CSV)" - issue with downloaded file's format for the "Timestamp" column in the CSV. (Green Square in screenshot below)

On screen the Timestamp is in this format (Orange Square in screenshot below):

2024-03-27T08:30:51.000-04:00

Enter image description here

But after downloading via "Download search results (CSV)" the format changes to (Red squares in screenshot below):

1711542651000

Enter image description here


What is going on? How can I get the download file to write "2024-03-27T08:30:51.000-04:00" instead of "1711542651000" for each occurrence of Timestamp ?

Thank you for your time! Best Regards, Donald

profile picture
DC
posta un mese fa239 visualizzazioni
1 Risposta
1
Risposta accettata

Hello,

When logs are downloaded from CloudWatch as CSV, the timestamp format is standardized to milliseconds since the Unix epoch (January 1, 1970, 00:00:00 UTC) for consistency.

This standardized timestamp format is used regardless of the original timestamp format in the logs when they were ingested into CloudWatch Logs. The reason for this is that CSV is a flat file format that works best with a uniform timestamp format across all log events.

profile picture
Julian
con risposta un mese fa
profile picture
ESPERTO
verificato un mese fa
  • Hi Julian,
    Thank you for your quick reply and information! I will start to look at converting the Unix epoch format into the Timestamp format via Ruby. Best Regards, Donald Collins

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande