Log Timestamp Parser & Sorter – ISO-8601, Unix, Apache/Nginx, Syslog
What Does This Tool Do?
Working with logs from different systems can be a headache when each one uses a different timestamp format. This tool takes the pain out of log analysis by automatically recognizing various timestamp formats, letting you sort entries chronologically, and converting everything to your preferred format.
Whether you're debugging a distributed system, analyzing server logs, or just trying to make sense of timestamps from multiple sources, this converter handles the heavy lifting so you can focus on what the logs actually tell you.
Key Features
- Smart Format Detection: The tool automatically figures out what timestamp format each line uses - no need to specify it manually
- Multiple Format Support: Handles ISO-8601 (including offsets and nanoseconds), Unix timestamps, RFC 2822, Apache/Nginx access and error logs, syslog, Java/Python, Go, HAProxy, and common application logs
- Flexible Sorting: Arrange your logs from oldest to newest or newest to oldest with a single click
- Batch Conversion: Transform all timestamps to a consistent format - great for comparing logs from different sources
- Custom Patterns: Use regex for input matching and strftime patterns for output formatting when you need something specific
- Preserves Context: Everything around your timestamps stays intact - log levels, messages, metadata all remain in place
Supported Timestamp Formats
ISO-8601
2024-01-15T10:30:00Z
2024-01-15T10:30:00.123Z (milliseconds)
2024-01-15T10:30:00+00:00 (Nginx $time_iso8601 / RFC 5424)
2024-01-15T10:30:00.123456789Z (Kubernetes / Docker)
The international standard - unambiguous and widely used in APIs and modern systems
Unix Timestamps
1705312200 (seconds since epoch)
1705312200000 (milliseconds since epoch)
1705312200.123 (Nginx $msec)
Compact numeric format - common in databases, APIs, Nginx, and system internals
RFC 2822
Mon, 15 Jan 2024 10:30:00 +0000
Human-readable format used in email headers and HTTP
Apache / Nginx Access Log
[10/Oct/2000:13:55:36 -0700] (CLF / $time_local)
[15/Jan/2024:10:30:00.123456 +0000] (AWS ALB/ELB)
Classic web server access-log format with month names and timezone offsets
Apache / Nginx Error Log
[Wed Oct 11 14:32:52 2000] (Apache error_log)
2024/01/15 10:30:00 (Nginx error_log / Go)
Error logs use different layouts than access logs - both are detected automatically
Syslog
Jan 15 10:30:00 (RFC 3164)
No year in the timestamp - the tool infers the year from the current date
Application Logs
2024-01-15 10:30:00,123 (Java / Python)
2024-01-15 10:30:00 (IIS W3C / common)
15/Jan/2024:10:30:00.123 (HAProxy)
Simple readable formats used by app servers, load balancers, and Windows IIS
Common Use Cases
Debugging Distributed Systems
When tracking down issues across microservices, each service might log timestamps differently. Paste logs from multiple sources, let the tool detect formats automatically, and sort everything chronologically to see the actual sequence of events.
Log Aggregation Prep
Before feeding logs into analysis tools like Elasticsearch or Splunk, normalize all timestamps to a consistent format. This ensures proper parsing and makes time-based queries work correctly.
API Response Analysis
Convert Unix timestamps from API responses to human-readable formats for documentation or debugging. No more mental math converting epoch times.
Report Generation
When creating incident reports or audit logs, convert technical timestamps to a consistent, readable format that non-technical stakeholders can understand.
Quick Start Guide
- Paste your logs into the input area. Each line should contain at least one timestamp.
- Check the detection results to see which formats were found and if any lines couldn't be parsed.
- Choose your output format from the dropdown - ISO-8601 is a safe default for most use cases.
- Apply sorting if you need logs in chronological order.
- Click the output area to copy the converted logs to your clipboard.
Advanced: Custom Formats
For non-standard timestamp formats, you can specify custom patterns:
Input (Regex Pattern)
Use a regular expression to find the timestamp. If the pattern has a capture group, that group is parsed; otherwise the whole match is used.
\d{4}/\d{2}/\d{2} \d{2}:\d{2}:\d{2} matches 2024/01/15 10:30:00
ts=(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}) extracts only the datetime after ts=
Output (strftime Pattern)
Use strftime specifiers to format the output exactly how you need it.
%Y-%m-%d %H:%M:%S produces 2024-01-15 10:30:00
%d/%m/%Y %I:%M %p produces 15/01/2024 10:30 AM
Troubleshooting
Some lines aren't being parsed
Check if those lines actually contain timestamps. The tool scans each line for known timestamp patterns. If your timestamps use an unusual layout, select a specific input format or use a custom regex pattern.
Wrong format detected
In auto-detect mode, the tool uses pattern matching which can occasionally be ambiguous. Try selecting the specific input format from the dropdown to force correct parsing.
Sorting seems wrong
Lines that couldn't be parsed will be sorted to the end. Check the detection results panel to see which lines have parsing errors and why.
Related Tools
- Unix Timestamp Converter - Convert Unix epoch seconds to readable dates and back. ISO 8601 input & output, up to 10 multi-timezone outputs with inline settings, recent timezone chips, 7 date formats, 400+ IANA timezones, DST-aware. Runs locally in your browser.
- Time Calculator - Paste two Unix epoch timestamps (seconds or milliseconds) and get the difference. Also add/subtract hours from a date, compare two datetimes, and calculate work hours with break deduction. DST-aware, runs in your browser.
- Cron Expression Parser - Understand what a cron expression is, compare cron vs quartz, and parse Linux (5-field) or Quartz/Spring (6-7 field) cron job expressions. Generate human-readable cron schedules and next N execution times in any IANA timezone with presets and an expression builder.
- Elapsed Time Calculator - Calculate elapsed duration between two datetimes in years, months, days, hours, minutes, seconds, and ISO 8601. Count business days with custom working weekdays, fixed date exclusions (YYYY-MM-DD, MM-DD), and recurring monthly rules (e.g. first Wednesday). Copy all formats as CSV. Runs locally in your browser.
Log Timestamp Parser & Sorter – ISO-8601, Unix, Apache/Nginx, Syslog
Parsing Settings
Timestamps are detected and parsed per line.
Timestamps are detected and parsed per line.
Detection Results
%Y - Year (2024)%m - Month (01-12)%d - Day (01-31)%H - Hour (00-23)%M - Minute (00-59)%S - Second (00-59)%.3f - Milliseconds%z - Timezone offset