The log looks like this:
2022/04/26 12:00:00 INFO foo bar stuff here
Other time formats also fail. Why?
The Auto Timestamp function tries to automatically figure out the time format. Part of that could be a timezone, which is often something like UTC, EDT or PST. All uppercase letters! So the INFO term immediately following the timestamp is mistakenly seen as a timezone, but then fails to parse because it isnt.
The work arounds:
Regex Extract: ^(?<__mytime>[0-9\/]+\s[0-9:]+)
Auto Timestamp: Source Field __mytime