# DateParsinfailure

**URL:** <https://discuss.elastic.co/t/dateparsinfailure/188798>\
**Category:** Logstash\
**Created:** [July 3, 2019, 7:13pm UTC](https://discuss.elastic.co/t/dateparsinfailure/188798 "2019-07-03T19:13:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aymen\_Ben\_Moussa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aymen_ben_moussa/32/44513_2.png) [@Aymen\_Ben\_Moussa](https://discuss.elastic.co/u/Aymen_Ben_Moussa)\
**Post date:** [July 3, 2019, 7:13pm UTC](https://discuss.elastic.co/t/dateparsinfailure/188798/1 "2019-07-03T19:13:30Z")

</div>

this is my struct

> ```
> "payload" => {
> "status" => "success",
> "createdAt" => "2019-07-01 12:34:45 +0000",
> "id" => "5d19fde56eca4555d9f61b",
> 
> ```

and this is my logstash filter

> ```
> > if "transactions" in [tags] {
> > 
> > date {
> > match => ["[payload][createdAt]", "yyyy-MM-dd HH:mm:ss ZZZ"]
> > target => "createdAt"
> > }
> 
> ```

is there something wrong with my my filter syntax ?

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 3, 2019, 7:25pm UTC](https://discuss.elastic.co/t/dateparsinfailure/188798/2 "2019-07-03T19:25:40Z")

</div>

> [@Aymen\_Ben\_Moussa](#):
>
> date { \> match =\> ["[payload][createdAt]", "yyyy-MM-dd HH:mm:ss ZZZ"] \> target =\> "createdAt" \> }

Change ZZZ to ZZ.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 31, 2019, 7:25pm UTC](https://discuss.elastic.co/t/dateparsinfailure/188798/3 "2019-07-31T19:25:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.