td-agent / fluentd timestamp to iso8601 format

[willstopher817]

What is a problem?

Hi TEAM!
I'm trying to convert this time "2025-01-27 13:27:46 -0500" to iso8601 format like : "2025-01-10T18:06:56.454Z

this is my config:

<source>
  @type tail
  @id input_tail_log
  <parse>
    @type none
  </parse>
  path /logs/*.log
  pos_file /var/log/td-agent/pos/logs.pos
  tag log
</source>

<filter log>
  @type record_transformer
  <record>
    log_entry ${time} ${hostname} ${record["message"]}
  </record>
</filter>

<match log>
  @type s3
  s3_bucket event-log
  s3_region us-east-1
  path
  <buffer tag,time>
    @type file
    path /log
    timekey 360
    timekey_wait 2m
    timekey_use_utc true # use utc
    chunk_limit_size 5m
  </buffer>
  format single_value
  message_key log_entry
  store_as text
</match>

but the it seems like it doesn't work:
2025-01-27 13:27:46 -0500 ${hostname} 2025-01-27 13:27:46.679 INFO SearchControllerV1:268 - DISCOVER

Any input please?

Describe the configuration of Fluentd

No response

Describe the logs of Fluentd

No response

Environment

td-agent / fluentd timestamp to iso8601 format

[willstopher817]

BTW, I don't want to use ruby expression for this at all.