diff --git a/reference/html/README.html b/reference/html/README.html
index dcba8c703..103724e63 100644
--- a/reference/html/README.html
+++ b/reference/html/README.html
@@ -477,10 +477,16 @@ An example from Kibana would resemble the following image:</p>
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
@@ -499,10 +505,16 @@ If you want to use Grok together with the logs from Cloud Foundry, you have to u
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
diff --git a/reference/html/index.html b/reference/html/index.html
index 8a9bf74c6..80b3eca9d 100644
--- a/reference/html/index.html
+++ b/reference/html/index.html
@@ -469,10 +469,16 @@ An example from Kibana would resemble the following image:</p>
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
@@ -491,10 +497,16 @@ If you want to use Grok together with the logs from Cloud Foundry, you have to u
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
diff --git a/reference/html/intro.html b/reference/html/intro.html
index 8bde34fa6..401726a0b 100644
--- a/reference/html/intro.html
+++ b/reference/html/intro.html
@@ -377,10 +377,16 @@ An example from Kibana would resemble the following image:</p>
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
@@ -399,10 +405,16 @@ If you want to use Grok together with the logs from Cloud Foundry, you have to u
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
diff --git a/reference/html/spring-cloud-sleuth.html b/reference/html/spring-cloud-sleuth.html
index 8a9bf74c6..80b3eca9d 100644
--- a/reference/html/spring-cloud-sleuth.html
+++ b/reference/html/spring-cloud-sleuth.html
@@ -469,10 +469,16 @@ An example from Kibana would resemble the following image:</p>
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>
@@ -491,10 +497,16 @@ If you want to use Grok together with the logs from Cloud Foundry, you have to u
 <div class="listingblock">
 <div class="content">
 <pre class="highlightjs highlight"><code>filter {
-       # pattern matching logback pattern
-       grok {
-              match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
-       }
+  # pattern matching logback pattern
+  grok {
+    match =&gt; { "message" =&gt; "(?m)OUT\s+%{TIMESTAMP_ISO8601:timestamp}\s+%{LOGLEVEL:severity}\s+\[%{DATA:service},%{DATA:trace},%{DATA:span},%{DATA:exportable}\]\s+%{DATA:pid}\s+---\s+\[%{DATA:thread}\]\s+%{DATA:class}\s+:\s+%{GREEDYDATA:rest}" }
+  }
+  date {
+    match =&gt; ["timestamp", "ISO8601"]
+  }
+  mutate {
+    remove_field =&gt; ["timestamp"]
+  }
 }</code></pre>
 </div>
 </div>