# Date parse failure
**URL:** https://discuss.elastic.co/t/date-parse-failure/103123
**Category:** Kibana
**Created:** [October 7, 2017, 6:47pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123 "2017-10-07T18:47:46Z")
**Posts on this page:** 14
**Page:** 1
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 6:47pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/1 "2017-10-07T18:47:46Z")
So I'm doing a school project with a scraper, I'm now trying to visualize this scraped data inside kibana.
This is what my logstash config file looks like:
```
input {
file{
path => "/home/nod/Desktop/Data/bodybuilding_forum.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter{
csv {
separator => ","
columns => ["PostDate", "Author", "Title"]
}
date {
match => ["PostDate" , "dd/MMM/yyyy:HH:mm:ss Z"]
}
}
output{
elasticsearch{
hosts => "localhost:9200"
index => "forum"
document_type => "forum_bodybuilding"
}
stdout{}
}
```
My data is a csv file with just strings inside, looks like this:
> PostDate Author Title
> 18 feb 2005 XXL Nutrition XXLNutrition.nl
> 21 jan 2015 Analytic [Supplementlabtest.com](http://Supplementlabtest.com) - Alle testen op één plaats
> 23 mrt 2015 BULK POWDERS BulkPowders.nl
It's just 3 columns in a csv file, hard to show here.
In kibana I get this error:
> "host": "research",
> "Author": "Galen",
> "Title": "Boek: Bonds voedingssupplementen",
> "message": "12 mei 2017,Galen,Boek: Bonds voedingssupplementen",
> "PostDate": "12 mei 2017",
> "tags": [
> "\_dateparsefailure"
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 7, 2017, 7:00pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/2 "2017-10-07T19:00:52Z")
> [@Clemens\_Overbosch](#):
>
> match =\> ["PostDate" , "dd/MMM/yyyy:HH:mm:ss Z"]
That does not match;
> [@Clemens\_Overbosch](#):
>
> 18 feb 2005
If you update the match pattern you will be good 🙂
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 7:35pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/3 "2017-10-07T19:35:04Z")
How would I need to change it?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 7, 2017, 7:36pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/4 "2017-10-07T19:36:19Z")
[https://www.elastic.co/guide/en/logstash/5.6/plugins-filters-date.html#plugins-filters-date-match](https://www.elastic.co/guide/en/logstash/5.6/plugins-filters-date.html#plugins-filters-date-match), let us know if you run into further problems.
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 7:40pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/5 "2017-10-07T19:40:11Z")
So if I read there i also need to add locale=NL, right? As well as making it "dd MMM yyyy Z".
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 7:44pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/6 "2017-10-07T19:44:41Z")
Still getting the same error as before
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [October 7, 2017, 7:51pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/7 "2017-10-07T19:51:14Z")
You do not have a timezone, so something like this should work:
```auto
date {
match => ["PostDate", "dd MMM yyyy"]
locale => "nl"
}
```
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 7:55pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/8 "2017-10-07T19:55:58Z")
lol thats awkward.. it worked.. i had the same except i didnt have nl in quotes lol. Thanks a bunch.
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 9:04pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/9 "2017-10-07T21:04:12Z")
Even tho it didnt give a parsing error anymore it does still seem that PostDate is still a string inside kibana, and none of my stuff seems aggregatable:
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 7, 2017, 9:16pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/10 "2017-10-07T21:16:05Z")
You will need to delete the index and then recreate it so the mappings are correctly set.
Also for string, use the `.keyword` field instead.
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 9:17pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/11 "2017-10-07T21:17:30Z")
I've already deleted the indexes multiple time tho..
This is what my config looks like atm:
```
input {
file{
path => "/home/ipfit6/Desktop/Data/bodybuilding_forum.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter{
csv {
separator => ","
columns => ["PostDate", "Author", "Title"]
}
date {
match => ["PostDate", "dd MMM yyyy"]
locale => "nl"
}
}
output{
elasticsearch{
hosts => "localhost:9200"
index => "forum"
document_type => "forum_bodybuilding"
}
stdout{}
}
```
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 7, 2017, 9:19pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/12 "2017-10-07T21:19:55Z")
Ah ok. The date filter puts things into `@timestamp` by default, if you don't want that you need to tell it so. The docs cover that.
---
### Author:  [@Clemens\_Overbosch](https://discuss.elastic.co/u/Clemens_Overbosch)
#### Post date: [October 7, 2017, 9:23pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/13 "2017-10-07T21:23:06Z")
Ah yeah.. figured it was something like that once I look properly at the timestamp info so thats fine. Still I can't get any visualisation from the data i put in for some reason.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 4, 2017, 9:23pm UTC](https://discuss.elastic.co/t/date-parse-failure/103123/14 "2017-11-04T21:23:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.