Log timestamp normalizer
Find timestamps in pasted logs and rewrite them all in one format and timezone.
Log timestamp normalizer
Paste a chunk of log output and this tool finds the timestamp on every line and rewrites it in one consistent format and timezone, leaving the rest of each line exactly as it was. It recognizes BSD syslog ("Mar 2 10:05:15"), the Apache/NCSA common log format ("[02/Mar/2024:10:05:15 -0800]"), ISO 8601 ("2024-03-02T10:00:00Z") and bare Unix epoch values in seconds or milliseconds — useful whenever you're comparing logs from a server, a load balancer and an application that each stamp events differently.
Choose the target format — ISO 8601, Unix seconds, Unix milliseconds or a human-readable date — and the target timezone the result is expressed in. Timestamps that carry no offset, like classic syslog lines or naive ISO strings, are interpreted using the assumed timezone you set, so a syslog line without a year or offset still lands on the correct UTC instant. You can also shift every timestamp by a fixed number of minutes to correct a clock that was running fast or slow, recalculate every line as elapsed time since the first recognized timestamp to see gaps and bursts at a glance, and sort the pasted lines into chronological order regardless of how they arrived.
A line with no recognizable timestamp is left untouched and, unless you turn the option off, flagged in the output so it doesn't slip past you unnoticed. The live tally under the output reports how many lines came in, how many timestamps were recognized and converted, and how many lines had none.
Everything runs locally in your browser — nothing you paste is uploaded anywhere, which matters when the logs you're normalizing contain internal hostnames, IPs or request paths. When you're done, copy the result, download it as a .txt file, or send it straight into another tool such as the log entity extractor.