# Date match issue in logstash filter

**URL:** <https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486>\
**Category:** Logstash\
**Created:** [March 21, 2017, 6:14pm UTC](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486 "2017-03-21T18:14:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![whyapenny](https://avatars.discourse-cdn.com/v4/letter/w/90db22/32.png) [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Post date:** [March 21, 2017, 6:14pm UTC](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486/1 "2017-03-21T18:14:38Z")

</div>

"Tue Mar 21 2017 11:55:00 GMT-0400 (EDT)"

Could use a little help figuring out what I have wrong:  
date{  
match =\> ["[ENTRY][Timestamp]", "YYYY-MM-dd HH:mm:ss.SSS Z", "ISO8601", "EEE MMM dd yyyy HH:mm:ss z", "EEE MMM dd yyyy HH:mm:ss Z" ]  
}

:exception=\>"Invalid format: "Tue Mar 21 2017 12:01:45 GMT-0400 (EDT)" is malformed at "GMT-0400 (EDT)"", :config\_parsers=\>"YYYY-MM-dd HH:mm:ss.SSS Z,ISO8601,EEE MMM dd yyyy HH:mm:ss z,EEE MMM dd yyyy HH:mm:ss Z", :config\_locale=\>"default=en\_US", :level=\>:warn}

---

<div class="post-metadata">

**Author:** ![dannygoulder](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dannygoulder/32/22259_2.png) [@dannygoulder](https://discuss.elastic.co/u/dannygoulder)\
**Post date:** [March 21, 2017, 6:54pm UTC](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486/2 "2017-03-21T18:54:09Z")

</div>

[https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html](https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html)

Try  
`"EEE MMM dd yyyy HH:mm:ss 'GMT'Z '(EDT)'"`

Although you might wish to mutate the field to get rid of the 'GMT' and trailing timezone TLA (since Logstash can't parse these).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 18, 2017, 6:54pm UTC](https://discuss.elastic.co/t/date-match-issue-in-logstash-filter/79486/3 "2017-04-18T18:54:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.