ES 0.90.5 failing to parse date format

Elastic Stack Elasticsearch
1

On ES 0.90.5, I have this error https://gist.github.com/osssubb/6774414coming up in the logs.

While this error came up I had this as my ES template:
https://gist.github.com/osssubb/6740562. The new logs that came in today
had time-format as 'Oct 1 01:45:01'. Please notice that there are 2 spaces
between 'Oct' and '1'. While in my ES template, I've defined date-format as
'MMM dd HH:mm:ss' where there is only a single space between the last
alphabet of the month and first digit of the date. I thought this might be
the reason for error and:

(i) I changed the mapping of date of the aforementioned ES-template to:
"date": { "type": "date", "format": "MMM dd HH:mm:ss||MMM d HH:mm:ss",
"index": "analyzed" }.
Same errors still came up.

(ii) I deleted the whole mapping-template and re-started ES without any
mapping at all. The error still persisted.

Please advise on how to solve this.

Thank you.

--
Subin

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

2

Infact, (i) did solve the issue. I was not seeing the changes reflected
suddenly since ES was still writing to the old index which was created when
the old mapping was in effect. When new indexes got created, the new
mappings kicked in and the errors were no more.

On Tuesday, 1 October 2013 11:53:05 UTC+5:30, subin wrote:

On ES 0.90.5, I have this error https://gist.github.com/osssubb/6774414coming up in the logs.

While this error came up I had this as my ES template:
@fields separated but date analyzed. · GitHub. The new logs that came in today
had time-format as 'Oct 1 01:45:01'. Please notice that there are 2 spaces
between 'Oct' and '1'. While in my ES template, I've defined date-format as
'MMM dd HH:mm:ss' where there is only a single space between the last
alphabet of the month and first digit of the date. I thought this might be
the reason for error and:

(i) I changed the mapping of date of the aforementioned ES-template to:
"date": { "type": "date", "format": "MMM dd HH:mm:ss||MMM d HH:mm:ss",
"index": "analyzed" }.
Same errors still came up.

(ii) I deleted the whole mapping-template and re-started ES without any
mapping at all. The error still persisted.

Please advise on how to solve this.

Thank you.

--
Subin

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.