I've got logs that contain a timestamp in 24 hour YYYY-MM-DD HH:MM:ss:SSS format (example: 2021-04-29 18:43:07.557). The timestamp in this log message is +5 hours ahead of the _time of the event.
So far I've got this much, which extracts the timestamp from the message but I don't know how to go about showing the difference between these two, especially with the five hour offset. Ideally would just like to show a third value of the difference in the table. Appreciate any instruction.