# Date Convert

**URL:** <https://discuss.elastic.co/t/date-convert/281664>\
**Category:** Kibana\
**Created:** [August 17, 2021, 10:25am UTC](https://discuss.elastic.co/t/date-convert/281664 "2021-08-17T10:25:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![graimato](https://avatars.discourse-cdn.com/v4/letter/g/9e8a1a/32.png) [@graimato](https://discuss.elastic.co/u/graimato)\
**Post date:** [August 17, 2021, 10:25am UTC](https://discuss.elastic.co/t/date-convert/281664/1 "2021-08-17T10:25:52Z")

</div>

Hello,  
I created a pipeline to parse log file I want to parse datetime as follow

17/08/2021:12:14:50 +0200  
Or  
17/Aug/2021:12:14:50 +0200

I wrote pipeline

```auto
"patterns" : [
       "%{HTTPDATE:time}
....

   {
        "date" : {
          "field" : "time",
          "target_field" : "@timestamp",
          "formats" : [
              "dd/MM/yyyy:H:m:s Z || dd/MMM/yyyy:H:m:s Z"
          ],
          "timezone" : "Europe/Rome",
          "on_failure" : [
            {
              "append" : {
                "field" : "error.message",
                "value" : "{{_ingest.on_failure_message}}"
              }
            }
          ]
        }
      }

```

Everything works well when I use format

17/ **Aug** /2021:12:14:50 +0200

but fails when I use

17/08/2021:12:14:50 +0200

Has someone solved it?

best regards

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [August 17, 2021, 11:12am UTC](https://discuss.elastic.co/t/date-convert/281664/2 "2021-08-17T11:12:52Z")

</div>

You syntax for having two formats is wrong. Its an array. So you need to do it comma seperated in different Strings. ["format 1","format 2"]

---

<div class="post-metadata">

**Author:** ![graimato](https://avatars.discourse-cdn.com/v4/letter/g/9e8a1a/32.png) [@graimato](https://discuss.elastic.co/u/graimato)\
**Post date:** [August 17, 2021, 2:29pm UTC](https://discuss.elastic.co/t/date-convert/281664/3 "2021-08-17T14:29:44Z")

</div>

Thanks for your response

```auto
  {
        "date" : {
          "target_field" : "@timestamp",
          "formats" : [
            "dd/MM/yyyy:H:m:s Z",
            "dd/MMM/yyyy:H:m:s Z"
          ],
          "timezone" : "Europe/Rome",
          "on_failure" : [
            {
              "append" : {
                "field" : "error.message",
                "value" : "{{_ingest.on_failure_message}}"
              }
            }
          ],
          "field" : "time"
        }
      }

```

but also in this case works for

17/Aug/2021:12:14:50 +0200

and not works for

17/08/2021:12:14:50 +0200

---

<div class="post-metadata">

**Author:** ![graimato](https://avatars.discourse-cdn.com/v4/letter/g/9e8a1a/32.png) [@graimato](https://discuss.elastic.co/u/graimato)\
**Post date:** [August 31, 2021, 11:06am UTC](https://discuss.elastic.co/t/date-convert/281664/4 "2021-08-31T11:06:06Z")

</div>

I used ISO8601 and it works

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 28, 2021, 11:06am UTC](https://discuss.elastic.co/t/date-convert/281664/5 "2021-09-28T11:06:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.