# Date filter not parsing this datetime

**URL:** https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052
**Category:** Logstash
**Created:** [July 8, 2016, 1:51pm UTC](https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052 "2016-07-08T13:51:49Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![tmo](https://avatars.discourse-cdn.com/v4/letter/t/a9adbd/32.png) [@tmo](https://discuss.elastic.co/u/tmo)
#### Post date: [July 8, 2016, 1:51pm UTC](https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052/1 "2016-07-08T13:51:49Z")

</div>

It seems like this should work, but I'm getting a parsing error.

Sample: 07/08/16-09:25:42.140797  
date {  
match =\> ["datetime", "MM/dd/yy-HH:mm:ss.SSS"]  
}

What might I be doing wrong or how can I debug the error?

Thanks for the help!

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 8, 2016, 2:06pm UTC](https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052/2 "2016-07-08T14:06:44Z")

</div>

The error message you get,

> Failed parsing date from field {:field=\>"datetime", :value=\>"07/08/16-09:25:42.140797", :exception=\>"Invalid format: "07/08/16-09:25:42.140797" is malformed at "797"", :config\_parsers=\>"MM/dd/yy-HH:mm:ss.SSS", :config\_locale=\>"default=en\_US", :level=\>:warn}

hints at what the problem is. Use SSSSSS instead of SSS (but keep in mind that Elasticsearch only keep millisecond resolution, and so will Logstash).

---

<div class="post-metadata">

### Author: ![tmo](https://avatars.discourse-cdn.com/v4/letter/t/a9adbd/32.png) [@tmo](https://discuss.elastic.co/u/tmo)
#### Post date: [July 8, 2016, 2:10pm UTC](https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052/3 "2016-07-08T14:10:49Z")

</div>

Yep, that seems to be what the deal is. I thought that is would just zero out the remaining timing, but obviously I was wrong. Thanks!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:48am UTC](https://discuss.elastic.co/t/date-filter-not-parsing-this-datetime/55052/4 "2017-07-06T04:48:52Z")

</div>


