title: Convert HTTPDATE timestamp to correct format in Graylog
body: <p>I have Squid writing logs with a timestamp as dd/MMM/yyyy:HH:mm:ss ZZZZ</p>
  <p>&quot;27/Jul/2022:11:55:40 +0100&quot;</p>
  <p>I'm sending these logs into Graylog using Filebeat, then parsing the timestamp into individual fields using HTTPDATE in a Grok extractor, so I can get separate Month, Monthday, Year etc fields.</p>
  <p>I need to replace the &quot;message received&quot; @timestamp field with the actual &quot;event occurred&quot; timestamp when the event is indexed in Elasticsearch.</p>
  <p>How can I convert the Squid timestamp from HTTPDATE into yyyy-MM-dd HH:mm:ss format?</p>
  <p>&quot;2022-07-27 11:55:40&quot;</p>
  <p>Thanks</p>
  <hr />
  <p>EDIT:</p>
  <p>Actually I think I have this now. In case it helps anyone else, this was done with a Regex Replacement Extractor:</p>
  <p><a href="https://i.stack.imgur.com/sdcLw.png" rel="nofollow noreferrer">Extractor Part1</a></p>
  <p><a href="https://i.stack.imgur.com/O21wY.png" rel="nofollow noreferrer">Extractor Part 2</a></p>
  <p><a href="https://i.stack.imgur.com/4TQ1m.png" rel="nofollow noreferrer">Extractor Part 3</a></p>