CloudWatch > Log Events > Actions > "Download search results (CSV)" - issue with downloaded file's format for the "Time Stamp" column in the CSV
Hi re:Post Support!
CloudWatch > Log Events > Actions > "Download search results (CSV)" - issue with downloaded file's format for the "Timestamp" column in the CSV. (Green Square in screenshot below)
On screen the Timestamp is in this format (Orange Square in screenshot below):
2024-03-27T08:30:51.000-04:00
But after downloading via "Download search results (CSV)" the format changes to (Red squares in screenshot below):
1711542651000
What is going on? How can I get the download file to write "2024-03-27T08:30:51.000-04:00" instead of "1711542651000" for each occurrence of Timestamp ?
Thank you for your time! Best Regards, Donald
- Newest
- Most votes
- Most comments
Hello,
When logs are downloaded from CloudWatch as CSV, the timestamp format is standardized to milliseconds since the Unix epoch (January 1, 1970, 00:00:00 UTC) for consistency.
This standardized timestamp format is used regardless of the original timestamp format in the logs when they were ingested into CloudWatch Logs. The reason for this is that CSV is a flat file format that works best with a uniform timestamp format across all log events.
Relevant content
- asked a year ago
- asked 2 years ago
AWS OFFICIALUpdated 4 months ago- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 7 months ago
- AWS OFFICIALUpdated 7 months ago
Hi Julian,
Thank you for your quick reply and information! I will start to look at converting the Unix epoch format into the Timestamp format via Ruby. Best Regards, Donald Collins