# Date @timestamp

**URL:** <https://discuss.elastic.co/t/date-timestamp/110948>\
**Category:** Logstash\
**Created:** [December 9, 2017, 10:51pm UTC](https://discuss.elastic.co/t/date-timestamp/110948 "2017-12-09T22:51:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![haylesr](https://avatars.discourse-cdn.com/v4/letter/h/7cd45c/32.png) [@haylesr](https://discuss.elastic.co/u/haylesr)\
**Post date:** [December 9, 2017, 10:51pm UTC](https://discuss.elastic.co/t/date-timestamp/110948/1 "2017-12-09T22:51:14Z")

</div>

I am new to ELK and am playing around with some basic data sources to learn how to set things up properly. The current CSV file that I'm parsing has two date fields in it: Modified Date and Published Date. These fields are both in the format: 12/08/2017 at 19:21:13 (GMT-0600). I have tried to use the date filter and grok filter to parse this these two fields from strings to a usable date format, but neither appear to do anything. I've tested the grok filter at the debugger sites and everything seems fine, but the new fields are never created.

```
filter {
  csv {
    separator => ","
    columns => ["qid","Title","Sub-Category","Category","CVE","Vendor","CVSS Base", "CVSS3 Base","Bugtraq ID","Modified Date","Published Date"]
  }
  grok {
    match => {"Published Date" => "%{DATE:Published}"}
    match => {"Modified Date" => "%{DATE:Modified}"}
  }
}
```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [December 10, 2017, 9:05pm UTC](https://discuss.elastic.co/t/date-timestamp/110948/2 "2017-12-10T21:05:00Z")

</div>

You should indeed use the date filter. This date pattern should work:

```
MM/dd/yyyy 'at' HH:mm:ss ('GMT'Z)
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 7, 2018, 9:05pm UTC](https://discuss.elastic.co/t/date-timestamp/110948/3 "2018-01-07T21:05:03Z")

</div>

Closed on January 7, 2018, 9:05pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.