Gets the day of the month of a timestamp field.
Parameter | Type | Required | Default Value | Description |
---|---|---|---|---|
as | string | optional[a] | _dayOfMonth | The name of the output field. |
field [b] | string | optional[a] | @timestamp | The name of the input field. |
timezone | string | optional[a] | The time offset to use, for example, -01:00 . If not specified, the query's offset will be used. | |
timezoneField | string | optional[a] | The name of the field containing the timezone to use, if not specified the query's timezone will be used. This is ignored if the timezone parameter is passed as well. If this is not defined the timezone offset of the query will be used. | |
[a] Optional parameters use their default value unless explicitly set. |
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale Syntaxtime:dayOfMonth("value")
and:
logscale Syntaxtime:dayOfMonth(field="value")
These examples show basic structure only.
time:dayOfMonth()
Examples
Click
next to an example below to get the full details.Extract Day of Month From Timestamp
Get the day of month from a timestamp using the
time:dayOfMonth()
function
Query
time:dayOfMonth(timestamp, as=day)
Introduction
In this example, the time:dayOfMonth()
function is
used to extract the day from a specific timestamp 2025-08-27
08:51:51.000
, demonstrating how to get the day value from a
datetime.
Step-by-Step
Starting with the source repository events.
- logscale
time:dayOfMonth(timestamp, as=day)
Extracts the day of the month from the @timestamp field and returns the result in a new field named day. If the
as
parameter is not specified, the result is returned in a field named _dayOfMonth as default. Event Result set.
Summary and Results
The query is used to extract the day of the month from a timestamp, which is useful for analyzing event patterns across different days within months.
This query is useful, for example, to analyze daily patterns, group events by day, or identify activity trends within months.
Sample output from the incoming example data:
@timestamp | day |
---|---|
2025-08-27 08:51:51.000 | 27 |
The result shows how the time:dayOfMonth()
function
extracts the day of the month (in this case 27
) from
the timestamp, returning it as an integer value.
For visualizing this data, consider using a Bar Chart widget to show
event counts by day of month, or a Heat Map widget to display activity
patterns across days. The time:dayOfMonth()
function is often used with other time functions like
time:month()
and time:year()
for complete date analysis.