# How to override logstash @timestamp value with my date time field from the logs

**URL:** https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026
**Category:** Logstash
**Created:** [January 10, 2017, 6:09am UTC](https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026 "2017-01-10T06:09:29Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![nick.e](https://avatars.discourse-cdn.com/v4/letter/n/8dc957/32.png) [@nick.e](https://discuss.elastic.co/u/nick.e)
#### Post date: [January 10, 2017, 6:26am UTC](https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026/2 "2017-01-10T06:26:37Z")

</div>

[Date-Filter](https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-match) expects a pattern matching your timeformat in the match-part.

Your pattern **yyyy-MM-dd HH:mm:ss,SSS** can't match your timestamp **Dec 12 13:45:43**.

The pattern you need should look like the following:  
`match => ["Call_Time", "MMM dd HH:mm:ss"]`

**but** : You don't have a year in your logfile, so Logstash will default to the year when the Logstash process started. More information here [Syslog date without year](https://discuss.elastic.co/t/syslog-date-without-year/29834).

---

_[View the full topic](https://discuss.elastic.co/t/how-to-override-logstash-timestamp-value-with-my-date-time-field-from-the-logs/71026)._