# How change pattern of data?

**URL:** <https://discuss.elastic.co/t/how-change-pattern-of-data/317045>\
**Category:** Elasticsearch\
**Created:** [October 19, 2022, 7:11pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045 "2022-10-19T19:11:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nikolas1306](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikolas1306/32/111507_2.png) [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Post date:** [October 19, 2022, 7:11pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045/1 "2022-10-19T19:11:27Z")

</div>

i have this format in kibana

`Jul 27, 2022 @ 15:27:26.598`

but is have a problem not order correctly with create a field datetime in logstash

```auto

filter {

   grok {
           match => ["message", "%{TIMESTAMP_ISO8601:logmessage}"]
     }

 
     date {
	         match => ["logmessage", "ISO8601", "YYYY-MM-dd HH:mm:ss"]
	         target => "logdate"
	        
        }

}

```

but message original is correct in kibana

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/3/33f73acce895e29ee0f12603a5c18dac4aeead3a.png)

i see json is correct kibana is very bad

```auto
 ],
    "log.file.path": [
      "/opt/wildfly/standalone/log/server.log.2022-07-27"
    ],
    "message.keyword": [
      "2022-07-27 18:18:35,951 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://0.0.0.0:9990/management"
    ],
    "logdate": [
      "2022-07-27T16:18:35.951Z"
    ],
    "@version": [
      "1"
    ],

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 19, 2022, 9:40pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045/2 "2022-10-19T21:40:06Z")

</div>

The `logdate` in your json seems correct, are you referring to `@timestamp`?

---

<div class="post-metadata">

**Author:** ![Nikolas1306](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nikolas1306/32/111507_2.png) [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Post date:** [October 19, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045/3 "2022-10-19T23:08:23Z")

</div>

yes logdate but i've resolved with change the datetime format in kibana options

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 16, 2022, 11:09pm UTC](https://discuss.elastic.co/t/how-change-pattern-of-data/317045/4 "2022-11-16T23:09:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.