# Convert Date String Into Date Format

**URL:** <https://discuss.elastic.co/t/convert-date-string-into-date-format/193913>\
**Category:** Logstash\
**Created:** [August 6, 2019, 4:10am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913 "2019-08-06T04:10:30Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 8:51am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/42 "2019-08-08T08:51:45Z")

</div>

Try using date\_time:

> convert =\> { "Date" =\> "date\_time" }

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 8:58am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/43 "2019-08-08T08:58:13Z")

</div>

data is parse but still showing date format into string not in date

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 9:17am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/44 "2019-08-08T09:17:12Z")

</div>

You are refreshing the fields, right?  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/1/21bb9390954291da008b88fcf2069afa1e5ffc37.png)

Is weird because if the data is parse should work...

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 10:25am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/45 "2019-08-08T10:25:56Z")

</div>

parse the data then refreshing the field

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 10:26am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/46 "2019-08-08T10:26:16Z")

</div>

i also create a new index but the result still the same

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 10:44am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/47 "2019-08-08T10:44:39Z")

</div>

Well lets try this:

> filter {  
> csv {  
> separator =\> ","  
> columns =\> ["Date","MobileNo","Msg","ServiceId","SMS","wsResponse","AKNMsgId","MMMsgId","AmountCharged"]  
> }  
> date {  
> match =\> ["Date", "MM/DD/YYYY HH:mm"]  
> target =\> "Date"  
> }  
> }

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 10:59am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/48 "2019-08-08T10:59:44Z")

</div>

data is parse but still date filed datatype showing string not date.  
Please check the attached screenshot

 ![Date%20String](https://us1.discourse-cdn.com/elastic/original/3X/a/9/a99e52554170a0763da7918e7337f6fe0c16b34b.jpeg)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:02am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/49 "2019-08-08T11:02:38Z")

</div>

date {  
match =\> ["Date", "MM/DD/YYYY HH:mm"]  
target =\> "Date"  
}  
}  
If you see the result in the above screenshot date is showing 2019-01-30 while we give the date format is MM/DD/HH:mm

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [August 8, 2019, 11:09am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/50 "2019-08-08T11:09:12Z")

</div>

Did you create a new index again (as we can not change the mapping of the existing field once it has already been mapped as text) ?

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:10am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/51 "2019-08-08T11:10:18Z")

</div>

Yes everytime i create a new index but the problem still remains the same...

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 11:17am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/52 "2019-08-08T11:17:39Z")

</div>

What if we give the same format?

> YYYY-MM-DDTHH:MM:SS.SSSSZ

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [August 8, 2019, 11:18am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/53 "2019-08-08T11:18:57Z")

</div>

My next two steps would be:

1. Have a look at the rubydebug output to make sure you have a Timestamp object in Logstash.
2. If it is a Timestamp, but the dynamic mapping doesn't detect it as a date datatype, create the mapping/a mapping template manually and define that field as a date.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:20am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/54 "2019-08-08T11:20:30Z")

</div>

YYYY-MM-DDTHH:MM:SS.SSSSZ it gives error on this format

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:23am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/55 "2019-08-08T11:23:17Z")

</div>

@Jenni if you see the screenshot when the data is parse logstash make by default timestamp @ date format but what i need to do is date format which is by default is string i have to make this column into date format.

create the mapping/a mapping template manually and define that field as a date.  
Can you please mention the code because i am new into ELK Stack.

---

<div class="post-metadata">

**Author:** ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)\
**Post date:** [August 8, 2019, 11:31am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/56 "2019-08-08T11:31:38Z")

</div>

[https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html)  
Try something like this and see if the index gets created correctly.

```
PUT _template/your_template
{
  "index_patterns": ["whateveryourindexnamestartswith*"],
  "mappings": {
    "properties": {
      "Date": {
        "type": "date"
      }
    }
  }
}

```

Edit: But you said you have some kind of template. What does it look like?

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:47am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/57 "2019-08-08T11:47:03Z")

</div>

![Date%20String](https://us1.discourse-cdn.com/elastic/original/3X/6/5/65d57646ccce2cfbbefc21e1d428d7222cfcd181.jpeg)

please check the attached image

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 11:48am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/58 "2019-08-08T11:48:23Z")

</div>

You typed PPUT

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:50am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/59 "2019-08-08T11:50:08Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/c/8/c89a2f68a8516ea963e5cef9fa4d0f45d6d797a4.png)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [August 8, 2019, 11:51am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/60 "2019-08-08T11:51:06Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/08ef016d933278c72bdff78251935fef681978fb.png) after putting the template its still showing in string

---

<div class="post-metadata">

**Author:** ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp)\
**Post date:** [August 8, 2019, 11:51am UTC](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913/61 "2019-08-08T11:51:30Z")

</div>

That means that works, check the field Date.

[Previous page](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913.md?page=2)

[Next page](https://discuss.elastic.co/t/convert-date-string-into-date-format/193913.md?page=4)