# Can't replace timestamp , getting \[1\] "\_dateparsefailure"

**URL:** <https://discuss.elastic.co/t/cant-replace-timestamp-getting-1--dateparsefailure/72520>\
**Category:** Logstash\
**Created:** [January 23, 2017, 6:03pm UTC](https://discuss.elastic.co/t/cant-replace-timestamp-getting-1--dateparsefailure/72520 "2017-01-23T18:03:06Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![irom77](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/irom77/32/12976_2.png) [@irom77](https://discuss.elastic.co/u/irom77)\
**Post date:** [January 24, 2017, 12:50pm UTC](https://discuss.elastic.co/t/cant-replace-timestamp-getting-1--dateparsefailure/72520/6 "2017-01-24T12:50:26Z")

</div>

Input string is i.e. all dates like _2017/20/01 13:53:35_ I am using **bold** one in above 'date' after 'csv'

> \<141\>Nov 3 12:53:35 DC1. 1,2017/20/01 13:53:35,001901000999,THREAT,file,1, **2017/20/01 13:53:35** ,1.1.1.1,2.2.2.2,0.0.0.0,0.0.0.0,RULE fake,me,,APP test,vsys1,app,rep,ae1.2,ae2.1,LF-elk,2017/20/01 13:53:35,33891243,1,445,66666,0,0,0x0,tcp,test,"WebFix.exe",Microsoft PE File(52060),any,low,server-to-client,5210010,0x0,10.0.0.0-10.255.255.255,10.0.0.0-10.255.255.255,0,,0,,,0,,,,,,,,0,38,0,0,0,PROD,DC1,

---

_[View the full topic](https://discuss.elastic.co/t/cant-replace-timestamp-getting-1--dateparsefailure/72520)._
