# Assume the date is current date if there is no date in log
**URL:** https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599
**Category:** Logstash
**Created:** [November 10, 2016, 7:54am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599 "2016-11-10T07:54:24Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@alex88](https://discuss.elastic.co/u/alex88)
#### Post date: [November 10, 2016, 7:54am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/1 "2016-11-10T07:54:24Z")
I have log:
08:42:21.706 [qtp1335954408-120] DEBUG i.s.client.http.JestHttpClient - POST method created based
It contains just time I need to add month and day . How can i do it with logstash filters?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 10, 2016, 8:26am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/2 "2016-11-10T08:26:38Z")
You'll have to use a ruby filter for this. Use Ruby's standard date and time functions to add the date in the field where you currently have the time
---
### Author:  [@alex88](https://discuss.elastic.co/u/alex88)
#### Post date: [November 10, 2016, 8:55am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/3 "2016-11-10T08:55:03Z")
Can you please provide some example?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 10, 2016, 9:27am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/4 "2016-11-10T09:27:19Z")
What part are you having trouble with, specifically? There are plenty of ruby filter examples out there.
---
### Author:  [@alex88](https://discuss.elastic.co/u/alex88)
#### Post date: [November 10, 2016, 10:17am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/5 "2016-11-10T10:17:20Z")
I have grok filter to parse this log
if [type] == "neo4j" {
grok {
match =\> [
"message", "%{TIMESTAMP\_ISO8601:timestamp} %{LOGLEVEL:severity} %{GREEDYDATA:message}",
"message", "%{TIME:timestamp} %{SYSLOG5424SD:data} %{LOGLEVEL:severity} %{GREEDYDATA:message}" ]
}
}
date {
match =\> ["timestamp" , "dd/MMM/yyyy:HH:mm:ss Z"]
}
}
but I got only time (because log has only time) How I can add day and month here?
thanks for reply magnusbaeck
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 8, 2016, 10:17am UTC](https://discuss.elastic.co/t/assume-the-date-is-current-date-if-there-is-no-date-in-log/65599/6 "2016-12-08T10:17:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.