# Dateparse failure problem

**URL:** <https://discuss.elastic.co/t/dateparse-failure-problem/231828>\
**Category:** Logstash\
**Created:** [May 9, 2020, 10:14am UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828 "2020-05-09T10:14:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Youssef\_SBAI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/youssef_sbai/32/64242_2.png) [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Post date:** [May 9, 2020, 10:14am UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828/1 "2020-05-09T10:14:15Z")

</div>

I use logsth and filebeat for ingestion in elastic I have ingestion is OK but i have \_dateparsefailure

```
input {
    beats {
    port => "5044"
    }
}    
              
filter {
    csv {
        separator => ";"
		columns => ["chaine", "job", "date_plan", "statut", "date_debut", "date_fin", "serveur", "numero_passage", "application", "sous_application"]
}

date {
match => ["date_plan" , "YYYY-MM-dd"]
}

date {
match => ["date_debut" , "YYYY-MM-dd HH:mm:ss"]
}

date {
match => ["date_fin" , "YYYY-MM-dd HH:mm:ss"]
}
mutate {
convert => { "numero_passage" => "integer" }
}

fingerprint {}

}

output {
  elasticsearch { 
  hosts => "http://localhost:9200" 
  index => "hello"
  }
stdout {codec => rubydebug}

}
```

---

<div class="post-metadata">

**Author:** ![Youssef\_SBAI](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/youssef_sbai/32/64242_2.png) [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Post date:** [May 9, 2020, 10:14am UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828/2 "2020-05-09T10:14:33Z")

</div>

```
     "date_plan" => "31/03/2020",
          "date_debut" => "01/04/2020 09:28",
         "fingerprint" => "41221aaa7b073606bc1607689508c5a1503db5c8",
              "statut" => "OK",
                 "log" => {
          "file" => {
            "path" => "C:\\Users\\h83710\\Desktop\\elastic\\logstash-7.5.2\\test\\FICHIER.csv"
        },
        "offset" => 436
    },
      "numero_passage" => 0,
                 "ecs" => {
        "version" => "1.4.0"
    },
    "sous_application" => "DMT_FLUX_IP",
            "@version" => "1",
                "tags" => [
        [0] "beats_input_codec_plain_applied",
        [1] "_dateparsefailure"
    ],
            "date_fin" => "01/04/2020 09:28",
         "message" => "RNAH20P;RNAH20PB;31/03/2020;OK;01/04/2020 09:28;01/04/2020 09:28;m-mvs.macif.fr;0;SID_SINISTRE;DMT_FLUX_IP",
           "agent" => {
        "hostname" => "C06513361",
              "id" => "c19672a9-bf8b-4bf7-8d01-10f24fe51d7a",
         "version" => "7.6.1",
            "type" => "filebeat",
    "ephemeral_id" => "4d0d2bcb-7cad-40ed-9c0e-35fb4c99cad3"
},
         "serveur" => "m-mvs.macif.fr",
     "application" => "SID_SINISTRE",
      "@timestamp" => 2020-05-09T10:07:48.185Z,
           "input" => {
    "type" => "log"
},
          "chaine" => "RNAH20P",
            "host" => {
    "name" => "C06513361"
},
             "job" => "RNAH20PB"
}
```

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [May 9, 2020, 1:31pm UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828/3 "2020-05-09T13:31:17Z")

</div>

None of the patterns you have specified match the data you are receiving. `date_plan` has the parts in the wrong order with an incorrect delimiter while the other also suffers from icorrect date format as well as missing seconds.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 6, 2020, 1:31pm UTC](https://discuss.elastic.co/t/dateparse-failure-problem/231828/4 "2020-06-06T13:31:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.