# Date parsing with am:pm and timezone
**URL:** https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616
**Category:** Logstash
**Created:** [November 21, 2017, 9:50pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616 "2017-11-21T21:50:35Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@ssasporta](https://discuss.elastic.co/u/ssasporta)
#### Post date: [November 21, 2017, 9:50pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/1 "2017-11-21T21:50:36Z")
The date in my logs looks like that:
`Nov 5, 2017 11:06:30 PM CST`
I tried to parse it like that:
```
date {
match => ["timestamp" , "MMM dd, yyyy KK:mm:ss aa Z"]
}
```
or like that:
```
date {
match => ["timestamp" , "MMM dd, yyyy HH:mm:ss aa Z"]
}
```
But still getting the error:
`[1] "_dateparsefailure"`
**What is the right way to parse this date format?**
Thanks
Sharon.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [November 21, 2017, 10:12pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/2 "2017-11-21T22:12:58Z")
According to the [docs](https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html), valid timezones are listed on [this page](http://joda-time.sourceforge.net/timezones.html), and CST is not one of them. Is that the same as CST6CDT?
```
mutate { gsub => ["message", "CST", "CST6CDT"] }
date { match => ["message", "MMM d, yyyy HH:mm:ss a ZZZ"] }
```
```
```
---
### Author:  [@ssasporta](https://discuss.elastic.co/u/ssasporta)
#### Post date: [November 21, 2017, 10:41pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/3 "2017-11-21T22:41:54Z")
Yes, it is the same , but still : "\_dateparsefailure"
I tried few ways including yours.
```
mutate {
gsub => ["timestamp", "CST", "CST6CDT"]
}
date {
match => ["timestamp", "MMM dd, yyyy hh:mm:ss aa Z"]
}
```
Thanks
Sharon.
---
### Author:  [@ssasporta](https://discuss.elastic.co/u/ssasporta)
#### Post date: [November 21, 2017, 10:45pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/4 "2017-11-21T22:45:18Z")
I think I found the issue. Will let you know.
Looks your answer was good.
---
### Author:  [@ssasporta](https://discuss.elastic.co/u/ssasporta)
#### Post date: [November 21, 2017, 10:49pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/5 "2017-11-21T22:49:50Z")
Your answer was actually perfect.
(I had two different timestamp fields in same events with same name)
Thanks a lot
Sharon.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 19, 2017, 10:50pm UTC](https://discuss.elastic.co/t/date-parsing-with-am-pm-and-timezone/108616/6 "2017-12-19T22:50:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.