# \_\_dateparsefailure trying match date

**URL:** <https://discuss.elastic.co/t/--dateparsefailure-trying-match-date/100734>\
**Category:** Logstash\
**Created:** [September 15, 2017, 8:39pm UTC](https://discuss.elastic.co/t/--dateparsefailure-trying-match-date/100734 "2017-09-15T20:39:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![SamuelF](https://avatars.discourse-cdn.com/v4/letter/s/ecd19e/32.png) [@SamuelF](https://discuss.elastic.co/u/SamuelF)\
**Post date:** [September 15, 2017, 8:39pm UTC](https://discuss.elastic.co/t/--dateparsefailure-trying-match-date/100734/1 "2017-09-15T20:39:16Z")

</div>

Hi,

I'm trying to match timestamp from log file and i have an \_dateparsefailure ☹

**This is my grok pattern (it match) :**  
`grok {`  
`match => { "message" => ["\[(?<logtimestamp>%{MONTHDAY}-%{MONTH}-%{YEAR}\s+%{TIME})\] %{DATA:level}:\s?(?:\[%{DATA:pool}\])?\s?%{GREEDYDATA:infos}"] }`  
`}`

**my date filter:**  
`date {`  
`locale => "fr"`  
`timezone => "Europe/Paris"`  
`match => ["logtimestamp", "dd-MMM-yyyy HH:mm:ss"]`  
`}`  
(I already try without locale and timezone set)

**an example of input:**  
`[15-Jan-2017 16:53:35] WARNING: Too many warnings call warning owner.`

**And the result of :**  
`{`  
`"logtimestamp" => "15-Jan-2017 16:53:35",`  
`"@timestamp" => 2017-09-15T20:20:29.133Z,`  
`"level" => "WARNING",`  
`"@version" => "1",`  
`"infos" => "Too many warnings call warning owner.",`  
`"tags" => [`  
`[0] "_dateparsefailure"`  
`]`  
`}`

As you see, my match fail... Do I miss something ?  
Thanks for your future answers 😄  
Samuel.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 16, 2017, 5:16am UTC](https://discuss.elastic.co/t/--dateparsefailure-trying-match-date/100734/2 "2017-09-16T05:16:58Z")

</div>

Look in your Logstash log. The date filter will tell you more about why it's failing to parse.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 14, 2017, 5:17am UTC](https://discuss.elastic.co/t/--dateparsefailure-trying-match-date/100734/3 "2017-10-14T05:17:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.