Log Timestamp Parser & Sorter – ISO-8601, Unix, Apache/Nginx, Syslog

Paste log lines, auto-detect ISO-8601, Unix epoch, RFC 2822, Apache/Nginx, syslog, Java/Python, Go, and HAProxy timestamps, normalize to UTC, sort chronologically, and export. Great for debugging distributed systems—client-side only.

What Does This Tool Do?

Working with logs from different systems can be a headache when each one uses a different timestamp format. This tool takes the pain out of log analysis by automatically recognizing various timestamp formats, letting you sort entries chronologically, and converting everything to your preferred format.

Whether you're debugging a distributed system, analyzing server logs, or just trying to make sense of timestamps from multiple sources, this converter handles the heavy lifting so you can focus on what the logs actually tell you.

Key Features

  • Smart Format Detection: The tool automatically figures out what timestamp format each line uses - no need to specify it manually
  • Multiple Format Support: Handles ISO-8601 (including offsets and nanoseconds), Unix timestamps, RFC 2822, Apache/Nginx access and error logs, syslog, Java/Python, Go, HAProxy, and common application logs
  • Flexible Sorting: Arrange your logs from oldest to newest or newest to oldest with a single click
  • Batch Conversion: Transform all timestamps to a consistent format - great for comparing logs from different sources
  • Custom Patterns: Use regex for input matching and strftime patterns for output formatting when you need something specific
  • Preserves Context: Everything around your timestamps stays intact - log levels, messages, metadata all remain in place

Supported Timestamp Formats

ISO-8601

2024-01-15T10:30:00Z

2024-01-15T10:30:00.123Z (milliseconds)

2024-01-15T10:30:00+00:00 (Nginx $time_iso8601 / RFC 5424)

2024-01-15T10:30:00.123456789Z (Kubernetes / Docker)

The international standard - unambiguous and widely used in APIs and modern systems

Unix Timestamps

1705312200 (seconds since epoch)

1705312200000 (milliseconds since epoch)

1705312200.123 (Nginx $msec)

Compact numeric format - common in databases, APIs, Nginx, and system internals

RFC 2822

Mon, 15 Jan 2024 10:30:00 +0000

Human-readable format used in email headers and HTTP

Apache / Nginx Access Log

[10/Oct/2000:13:55:36 -0700] (CLF / $time_local)

[15/Jan/2024:10:30:00.123456 +0000] (AWS ALB/ELB)

Classic web server access-log format with month names and timezone offsets

Apache / Nginx Error Log

[Wed Oct 11 14:32:52 2000] (Apache error_log)

2024/01/15 10:30:00 (Nginx error_log / Go)

Error logs use different layouts than access logs - both are detected automatically

Syslog

Jan 15 10:30:00 (RFC 3164)

No year in the timestamp - the tool infers the year from the current date

Application Logs

2024-01-15 10:30:00,123 (Java / Python)

2024-01-15 10:30:00 (IIS W3C / common)

15/Jan/2024:10:30:00.123 (HAProxy)

Simple readable formats used by app servers, load balancers, and Windows IIS

Common Use Cases

Debugging Distributed Systems

When tracking down issues across microservices, each service might log timestamps differently. Paste logs from multiple sources, let the tool detect formats automatically, and sort everything chronologically to see the actual sequence of events.

Log Aggregation Prep

Before feeding logs into analysis tools like Elasticsearch or Splunk, normalize all timestamps to a consistent format. This ensures proper parsing and makes time-based queries work correctly.

API Response Analysis

Convert Unix timestamps from API responses to human-readable formats for documentation or debugging. No more mental math converting epoch times.

Report Generation

When creating incident reports or audit logs, convert technical timestamps to a consistent, readable format that non-technical stakeholders can understand.

Quick Start Guide

  1. Paste your logs into the input area. Each line should contain at least one timestamp.
  2. Check the detection results to see which formats were found and if any lines couldn't be parsed.
  3. Choose your output format from the dropdown - ISO-8601 is a safe default for most use cases.
  4. Apply sorting if you need logs in chronological order.
  5. Click the output area to copy the converted logs to your clipboard.

Advanced: Custom Formats

For non-standard timestamp formats, you can specify custom patterns:

Input (Regex Pattern)

Use a regular expression to find the timestamp. If the pattern has a capture group, that group is parsed; otherwise the whole match is used.

\d{4}/\d{2}/\d{2} \d{2}:\d{2}:\d{2} matches 2024/01/15 10:30:00

ts=(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}) extracts only the datetime after ts=

Output (strftime Pattern)

Use strftime specifiers to format the output exactly how you need it.

%Y-%m-%d %H:%M:%S produces 2024-01-15 10:30:00

%d/%m/%Y %I:%M %p produces 15/01/2024 10:30 AM

Troubleshooting

Some lines aren't being parsed

Check if those lines actually contain timestamps. The tool scans each line for known timestamp patterns. If your timestamps use an unusual layout, select a specific input format or use a custom regex pattern.

Wrong format detected

In auto-detect mode, the tool uses pattern matching which can occasionally be ambiguous. Try selecting the specific input format from the dropdown to force correct parsing.

Sorting seems wrong

Lines that couldn't be parsed will be sorted to the end. Check the detection results panel to see which lines have parsing errors and why.

Related Tools

  • Unix Timestamp Converter - Convert Unix epoch seconds to readable dates and back. ISO 8601 input & output, up to 10 multi-timezone outputs with inline settings, recent timezone chips, 7 date formats, 400+ IANA timezones, DST-aware. Runs locally in your browser.
  • Time Calculator - Paste two Unix epoch timestamps (seconds or milliseconds) and get the difference. Also add/subtract hours from a date, compare two datetimes, and calculate work hours with break deduction. DST-aware, runs in your browser.
  • Cron Expression Parser - Understand what a cron expression is, compare cron vs quartz, and parse Linux (5-field) or Quartz/Spring (6-7 field) cron job expressions. Generate human-readable cron schedules and next N execution times in any IANA timezone with presets and an expression builder.
  • Elapsed Time Calculator - Calculate elapsed duration between two datetimes in years, months, days, hours, minutes, seconds, and ISO 8601. Count business days with custom working weekdays, fixed date exclusions (YYYY-MM-DD, MM-DD), and recurring monthly rules (e.g. first Wednesday). Copy all formats as CSV. Runs locally in your browser.

Log Timestamp Parser & Sorter – ISO-8601, Unix, Apache/Nginx, Syslog

Parsing Settings

Log input

Timestamps are detected and parsed per line.

Output (ISO-8601)

Detection Results

Lines: 0 | Parsed: 0 | Errors: 0
Detected formats:
Custom output format (strftime)
%Y - Year (2024)
%m - Month (01-12)
%d - Day (01-31)
%H - Hour (00-23)
%M - Minute (00-59)
%S - Second (00-59)
%.3f - Milliseconds
%z - Timezone offset