# Convert Date String Into Date Format

**URL:** <https://discuss.elastic.co/t/convert-date-string-into-date-format/193913>\
**Category:** Logstash\
**Created:** [August 6, 2019, 4:10am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913 "2019-08-06T04:10:30Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 4:10am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/1 "2019-08-06T04:10:30Z")

</div>

I have a column date when i write a config file and parse data into logstash the date column save by default into string format i want to convert date string column into date format can someone help really appreciate it .

I

---

<div class="post-metadata">

**Author:** ![jmilot](https://avatars.discourse-cdn.com/v4/letter/j/77aa72/32.png) [@jmilot](https://discuss.elastic.co/u/jmilot)\
**Post date:** [August 6, 2019, 6:57am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/2 "2019-08-06T06:57:12Z")

</div>

Have you try to create a template in logstash and map this field to date (maybe with format option) ?

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 7:23am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/3 "2019-08-06T07:23:00Z")

</div>

I have tried this date format but nothing will change  
date {  
match =\> ["Date", "MMM dd, yyyy HH:mm:ss a"]  
}  
but all goes in vain then i try the ruby plugin but still its show on string format not date format can you figure out how to change string into date format  
ruby {  
code =\> "  
event['Date'] = Date.parse(event['Date']);  
"  
}

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 7:25am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/4 "2019-08-06T07:25:20Z")

</div>

![Date](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d34afa430f3e557f3f528d93145c5f06a274a55.jpeg)

---

<div class="post-metadata">

**Author:** ![jmilot](https://avatars.discourse-cdn.com/v4/letter/j/77aa72/32.png) [@jmilot](https://discuss.elastic.co/u/jmilot)\
**Post date:** [August 6, 2019, 9:11am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/5 "2019-08-06T09:11:11Z")

</div>

When i say you to use template, it's in the output.

Do you use elasticsearch in output ?  
Do you manage index template with Logstash ?

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 10:11am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/6 "2019-08-06T10:11:47Z")

</div>

yes i manage index template with logstash and use elasticsearch in the output

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 11:12am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/7 "2019-08-06T11:12:08Z")

</div>

Hi @Syed.Ubaid  
Try adding a filter in logstash like this:

> filter {  
> mutate {  
> convert =\> { "Date" =\> "date" }  
> }  
> }

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 11:17am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/8 "2019-08-06T11:17:48Z")

</div>

Try this solution  
mutate {  
convert =\> { "Date" =\> "date" }  
}  
Logstash failed to parse the data but when i run without it, it parse the data.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 11:20am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/9 "2019-08-06T11:20:50Z")

</div>

My date column includes this value 4/30/2019 23:54 when i parse the data by default in kibana it show datatype string i want to change the string datatype into date datatype

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 11:31am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/10 "2019-08-06T11:31:01Z")

</div>

Maybe the problem is the date format in kibana.  
Have you change the default date format?

management\>advance settings\>date format:

![Captura](https://us1.discourse-cdn.com/elastic/original/3X/e/e/ee2670a6008422dca8ea91697e1f2974c5b6a3fb.png)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 11:33am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/11 "2019-08-06T11:33:56Z")

</div>

I have not make any changes in it the default date is showing as per your screenshot.

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 11:47am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/12 "2019-08-06T11:47:01Z")

</div>

Could you share a screenshot showing one value of the date as a string for example like this:

![Captura](https://us1.discourse-cdn.com/elastic/original/3X/c/7/c743b7fccfaf75579443b8859b444a5e5f59d390.png)  
(mine is in date format but I want to see yours in string)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 11:52am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/13 "2019-08-06T11:52:11Z")

</div>

Please check the attached picture ![Date%20String](https://us1.discourse-cdn.com/elastic/original/3X/e/f/ef7224fa2d29912a2cddac70ff2842c24063a1f6.jpeg)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 11:53am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/14 "2019-08-06T11:53:05Z")

</div>

if you see @timestamp is showing date format where the date column is showing in string datatype

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 12:00pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/15 "2019-08-06T12:00:06Z")

</div>

Yes, but could you show me a value like I did before showing one date?

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 12:02pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/16 "2019-08-06T12:02:46Z")

</div>

![Date%20String](https://us1.discourse-cdn.com/elastic/original/3X/4/7/47d0e212f60ef476eeeb70c301d0a95d07b5e5c5.jpeg)

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 12:10pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/17 "2019-08-06T12:10:03Z")

</div>

Ok, try changing the date format as I did in this screenshot (with this date format MM.DD.YYYY HH:mm):  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/f/af5229b0bda11ae881ef5b980f6778b7b5e1ae7e.png)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 12:16pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/18 "2019-08-06T12:16:18Z")

</div>

Ok then what to do ?? I have change the date format as desired. Could you please tell should i run the config file again ??

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 6, 2019, 12:19pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/19 "2019-08-06T12:19:03Z")

</div>

i run the config file and then check the result it still shows the date field in the string format no change in the datatype. Attach is the screenshot please check..

 ![Date%20String](https://us1.discourse-cdn.com/elastic/original/3X/3/3/331ffd824f07c40eae3ce56207ebdd715d1615c2.jpeg)

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 6, 2019, 12:42pm UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/20 "2019-08-06T12:42:15Z")

</div>

I see...  
This is weird because ES should change the datatype to Date automatically...  
Try adding this line in the Scaled date format section:  
["MM/DD/YYYY HH:mm"]  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/1/31fe13e7778e986e065de6989bec3b8af5c44f79.png)  
And check if change the datatype to date.

[Next page](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913.md?page=2)
