Failed to parse date field with format strict_date_optional_time||epoch_millis

Elastic Stack Logstash
1

Hi All,

We are observing the following error in the Logstash serves only for the 2023.05.09 logs. This issue is not occurring in other date indexes. so we can see the 2023.05.08 and 2023.05.10 logs are available on the Kibana without any issues. Furthermore, we have checked the timestamp difference between the 2023.05.09 and 2023.05.10 logs but these are identical.

Could not index event to Elasticsearch. {:status=>400, :action=>["index", {:_id=>nil, :_index=>"transactions-2023.05.09", :routing=>nil, :_type=>"_doc"}, #<LogStash::Event:0x437c8092>], :response=>{"index"=>{"_index"=>"transactions-2023.05.09", "_type"=>"_doc", "_id"=>"91kVJIgBgbbPx33EqrKh", "status"=>400, "error"=>{"type"=>"mapper_parsing_exception", "reason"=>"failed to parse field [timestamp] of type [date] in document with id '91kVJIgBgbbPx33EqrKh'. Preview of field's value: '2023-05-09 00:00:20,953'", "caused_by"=>{"type"=>"illegal_argument_exception", "reason"=>"failed to parse date field [2023-05-09 00:00:20,953] with format [strict_date_optional_time||epoch_millis]", "caused_by"=>{"type"=>"date_time_parse_exception", "reason"=>"Failed to parse with all enclosed parsers"}}}}}}

Could you please assist us to resolve the issue?

Thanks,

2

Check comma after seconds, usually it's dot.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.