# Date field is not Parsing

**URL:** <https://discuss.elastic.co/t/date-field-is-not-parsing/309006>\
**Category:** Logstash\
**Created:** [July 6, 2022, 11:15am UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006 "2022-07-06T11:15:01Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Muhammed\_Ashique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/muhammed_ashique/32/98686_2.png) [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\
**Post date:** [July 6, 2022, 11:15am UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006/1 "2022-07-06T11:15:01Z")

</div>

Hello Team,

i have some data carrying date and this data is tagged with date data type. but sometime this filed is carrying empty body (without Date String) How can i parse for both conditions ? In the Time of Date is in body and without Date as well.

I tried to do convert data type from logstash level as per below . but still not parsing.

filter {  
mutate {  
convert =\> ["run\_end\_datetime","string"]  
convert =\> ["run\_start\_datetime","string"]  
convert =\> ["[stages][stage\_log\_datetime]","string"]  
}  
}

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd90c3357dd2c5bf184ed13873cf5c459011541d.png)

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [July 6, 2022, 12:54pm UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006/2 "2022-07-06T12:54:07Z")

</div>

The date format in the error is taking about the field's mapping within the index. You sent an empty field to Elastic and then it looked at the mapping and said that it doesn't fit so sent an error back to Logstash saying it can't index it because the Elastic mapping wants a date and you sent an empty field.

It really depends on what you want to use this field for to determine what to do. Some people just drop the field and don't index it because it's blank. Some people add [ignore\_malformed](https://www.elastic.co/guide/en/elasticsearch/reference/current/ignore-malformed.html) to the mapping so it will save regardless of format (could give unexpected results).

---

<div class="post-metadata">

**Author:** ![Muhammed\_Ashique](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/muhammed_ashique/32/98686_2.png) [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\
**Post date:** [July 7, 2022, 7:04am UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006/3 "2022-07-07T07:04:44Z")

</div>

I could not make drop. if i drop it is working. i need to use malformed. is it need to enable mapping for each fields ?

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [July 7, 2022, 12:14pm UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006/4 "2022-07-07T12:14:43Z")

</div>

The link in my above post will show you an example. You just need to update the mapping in your index for that specific field.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 4, 2022, 12:15pm UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006/5 "2022-08-04T12:15:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.