correct regex. Timestamp moved to sub