# Date filter for minor changes in format

**URL:** <https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259>\
**Category:** Logstash\
**Created:** [August 14, 2019, 8:17pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259 "2019-08-14T20:17:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![userR](https://avatars.discourse-cdn.com/v4/letter/u/22d042/32.png) [@userR](https://discuss.elastic.co/u/userR)\
**Post date:** [August 14, 2019, 8:17pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/1 "2019-08-14T20:17:22Z")

</div>

Mar 3, 2019 9:40:30,734 PM  
Mar 11, 2019 11:20:10,114 PM

I have to parse logs with the following formats. The first date does not have a 0 in front of the 3. This also applies to the hours portion. I am unsure how I would use the date filter for both formats.

This is my current date config. Will it have trouble reading from days and hours in the single digits?

> ```
> date {
> match => ["logdate", "MMM dd, YYYY KK:mm:ss,SSS a"]
> target => "logdate"
> }
> 
> ```

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [August 14, 2019, 9:26pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/2 "2019-08-14T21:26:17Z")

</div>

When the day is a single digit is there one space or two between it and the month?Similarly for the hour.

---

<div class="post-metadata">

**Author:** ![userR](https://avatars.discourse-cdn.com/v4/letter/u/22d042/32.png) [@userR](https://discuss.elastic.co/u/userR)\
**Post date:** [August 14, 2019, 9:40pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/3 "2019-08-14T21:40:27Z")

</div>

Just one space

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [August 14, 2019, 10:22pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/4 "2019-08-14T22:22:28Z")

</div>

> [@userR](#):
>
> Just one space

OK, then "MMM dd, YYYY KK:mm:ss,SSS a" will parse both.

---

<div class="post-metadata">

**Author:** ![userR](https://avatars.discourse-cdn.com/v4/letter/u/22d042/32.png) [@userR](https://discuss.elastic.co/u/userR)\
**Post date:** [August 19, 2019, 9:07pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/5 "2019-08-19T21:07:47Z")

</div>

Was recently able to try this. Was unable to select "logdate" as my timestamp when I was creating the kibana index. I assume its unable to recognize logdate as an actual date stamp.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 16, 2019, 9:07pm UTC](https://discuss.elastic.co/t/date-filter-for-minor-changes-in-format/195259/6 "2019-09-16T21:07:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.