Gets the month of a timestamp field. (from 1 to 12)

ParameterTypeRequiredDefault ValueDescription
asstringoptional[a] _month The name of the output field.
field[b]stringoptional[a] @timestamp The name of the input field.
timezonestringoptional[a]   The time offset to use, for example, -01:00. If not specified, the query's offset will be used.
timezoneFieldstringoptional[a] @timezone The name of the field containing the timezone to use, if not specified the query's timezone will be used. This is ignored if the timezone parameter is passed as well. If this is not defined the timezone offset of the query will be used.

[a] Optional parameters use their default value unless explicitly set.

[b] The parameter name field can be omitted.

Hide omitted argument names for this function

Show omitted argument names for this function

time:month() Examples

Click + next to an example below to get the full details.

Extract Month From Timestamp

Get the month from a timestamp using the time:month() function

Query
logscale
time:month(timestamp, as=month)
Introduction

In this example, the time:month() function is used to extract the month from a specific timestamp 2025-08-27 08:51:51.312, demonstrating how to get the month value from a datetime.

Step-by-Step
  1. Starting with the source repository events.

  2. logscale
    time:month(timestamp, as=month)

    Extracts the month from the @timestamp field and returns the result in a new field named month. If the as parameter is not specified, the result is returned in a field named _month as default.

  3. Event Result set.

Summary and Results

The query is used to extract the month from a timestamp, which is useful for analyzing events at a monthly level.

This query is useful, for example, to analyze monthly patterns, group events by month, or investigate seasonal trends throughout the year.

Sample output from the incoming example data:

@timestampmonth
2025-08-27 08:51:51.3128

The result shows how the time:month() function extracts the month (in this case 8) from the timestamp, indicating August (the eighth month of the year).

For visualizing this data, consider using a Bar Chart widget to show event distribution across months, or a Heat Map widget to display activity patterns throughout the year. The time:month() function is often used with other time functions like time:year() and time:dayOfMonth() for complete date analysis.