# "\_dateparsefailure" of UNIX time
**URL:** https://discuss.elastic.co/t/dateparsefailure-of-unix-time/118683
**Category:** Logstash
**Created:** [February 6, 2018, 4:31pm UTC](https://discuss.elastic.co/t/dateparsefailure-of-unix-time/118683 "2018-02-06T16:31:05Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@ssasporta](https://discuss.elastic.co/u/ssasporta)
#### Post date: [February 6, 2018, 4:31pm UTC](https://discuss.elastic.co/t/dateparsefailure-of-unix-time/118683/1 "2018-02-06T16:31:06Z")
Hi,
`The input events from filebeat looks like that:`
{"@timestamp":"2018-02-06T16:12:59.892Z","beat":{"hostname":"velastic","name":"velastic","version":"5.4.1"},"fields":{"fields\_under\_root":true,"type":"uxform"},"input\_type":"log","message":"TransactionID: 74667ba4-4f82-4c37-a041-466596d4c700 **start[1516144217530]** time[0] tag[com.core.security.SecurityFilter.inbound]","offset":1831,"source":"/home/ElasticForTest/uxform.log","type":"log"}
`My Filter in Logstash is:`
```
grok {
break_on_match => true
keep_empty_captures => false
match => {
message => ["TransactionID: %{DATA:TransactionID}\s*start\[%{DATA:start}\]\s*time\[%{NUMBER:time}\]\s*tag\[%{DATA:tag}\]\s*" ]
}
patterns_dir => "/etc/logstash/patterns"
}
date {
match => ["start", "UNIX"]
target => "start"
}
```
**The problem is that I am getting:**
```
"tags" => [
[0] "beats_input_codec_plain_applied",
[1] "_dateparsefailure"
```
**Any Idea to solve it?**
Thanks
Sharon.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [February 6, 2018, 4:54pm UTC](https://discuss.elastic.co/t/dateparsefailure-of-unix-time/118683/2 "2018-02-06T16:54:32Z")
> [@ssasporta](#):
>
> Any Idea to solve it?
Use UNIX\_MS rather than UNIX?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 6, 2018, 4:54pm UTC](https://discuss.elastic.co/t/dateparsefailure-of-unix-time/118683/3 "2018-03-06T16:54:35Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.