The formatTime() function can be used to convert timestamp values into formatted strings using specified patterns. It supports various date and time format patterns, locales, and timezones to create customized datetime representations.

In this example, the formatTime() function is used to format the @timestamp field into a specific pattern with the format YYYY/MM/DD HH:mm:ss using US locale and UTC timezone and assigning the formatted timestamp to a new time field.

Example incoming data might look like this:

The query is used to transform ISO 8601 timestamps into a more readable format while maintaining UTC timezone.

This query is useful, for example, to standardize timestamp formats for reporting, create human-readable date representations in logs, or prepare data for export to systems requiring specific date formats.

Sample output from the incoming example data: