# How to display error messages or syslogs message date wise

**URL:** <https://discuss.elastic.co/t/how-to-display-error-messages-or-syslogs-message-date-wise/142489>\
**Category:** Logstash\
**Created:** [August 1, 2018, 7:42am UTC](https://discuss.elastic.co/t/how-to-display-error-messages-or-syslogs-message-date-wise/142489 "2018-08-01T07:42:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![geetika-06](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/geetika-06/32/41372_2.png) [@geetika-06](https://discuss.elastic.co/u/geetika-06)\
**Post date:** [August 1, 2018, 7:42am UTC](https://discuss.elastic.co/t/how-to-display-error-messages-or-syslogs-message-date-wise/142489/1 "2018-08-01T07:42:08Z")

</div>

Hi  
as i want to display my syslogs or error messages in kibana "discover page" as group wise and it should be grouped on the basis of date but in kibana it shows logs of eg. apache as date hours mins and sec eg August 1st 2018 11:23:34 ?.  
Below is the logstash filter config file.

filter {  
if [type] == "syslog" {  
grok {  
match =\> { "message" =\> "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{SYSLOGHOST:syslog\_hostname} %{DATA:syslog\_program}(?:[%{POSINT:syslog\_pid}])?: %{GREEDYDATA:syslog\_message}" }  
add\_field =\> ["received\_at", "%{@timestamp}"]  
add\_field =\> ["received\_from", "%{host}"]  
}  
syslog\_pri { }  
date {  
match =\> ["syslog\_timestamp", "MMM d", "MMM dd"]  
}  
}  
}

I am new to kibana please help to solve this.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 2, 2018, 6:32am UTC](https://discuss.elastic.co/t/how-to-display-error-messages-or-syslogs-message-date-wise/142489/2 "2018-08-02T06:32:49Z")

</div>

> as i want to display my syslogs or error messages in kibana "discover page" as group wise and it should be grouped on the basis of date

I don't understand what you mean by this.

> but in kibana it shows logs of eg. apache as date hours mins and sec eg August 1st 2018 11:23:34 ?.

Kibana's date format is configurable. If you look at the JSON tab of the Discovery view you'll see what the `@timestamp` field actually contains.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 30, 2018, 6:33am UTC](https://discuss.elastic.co/t/how-to-display-error-messages-or-syslogs-message-date-wise/142489/3 "2018-08-30T06:33:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
