# I got a "tags:\["\_dateparsefailure"\]" in my logstash rubydebug

**URL:** <https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074>\
**Category:** Logstash\
**Created:** [March 29, 2018, 10:38am UTC](https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074 "2018-03-29T10:38:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wentao](https://avatars.discourse-cdn.com/v4/letter/w/a9adbd/32.png) [@wentao](https://discuss.elastic.co/u/wentao)\
**Post date:** [March 29, 2018, 10:38am UTC](https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074/1 "2018-03-29T10:38:37Z")

</div>

my log's data is :  
2018-03-29.14:08:16.117 http-apr-8180-exec-10 INFO CouponServiceImpl 3952a0e3aa444bc19cbe69af2e3bf459 : xxxxxxxxxxxxxxxxxxxxxxxxxxx

my filter is :  
filter {  
if [type] == 'sq-strategy-web\_log' {  
ruby {  
init =\> "@kname = ['head', 'log\_content']"  
code =\> "  
new\_event = LogStash::Event.new(Hash[@kname.zip(event.get('message').split(' : '))])  
new\_event.remove('@timestamp')  
event.append(new\_event)  
"  
}  
if [head] {  
ruby {  
init =\> "@kname = ['threadPool', 'log\_level', 'javaClass', 'traceId']"  
code =\> "  
event.set('log\_date', event.get('head').split(' ')[0])  
new\_event = LogStash::Event.new(Hash[@kname.zip(event.get('head').split(' ')[1..-1])])  
new\_event.remove('@timestamp')  
event.append(new\_event)  
"  
remove\_field =\> ["head"]  
}  
}  
mutate {  
convert =\> [  
"logSort", "integer"  
]  
remove\_field =\> ["beat", "offset", "@version", "message", "kafka"]  
}  
date {  
match =\> ["log\_date", "yyyy-MM-dd.HH:mm:ss.SSSZ"]  
}  
}  
}

In my kibana， the timestamp is ok , the log\_data is right too，both consistent with current time，but，there is a “tags \_dateparsefailure”，This makes me very unhappy，please help me，sos！！！

---

<div class="post-metadata">

**Author:** ![atira](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/atira/32/28699_2.png) [@atira](https://discuss.elastic.co/u/atira)\
**Post date:** [March 31, 2018, 10:30pm UTC](https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074/2 "2018-03-31T22:30:01Z")

</div>

2018-03-29.14:08:16.117  
yyyy=2018  
MM=03  
dd=29  
HH=14  
mm=08  
ss=16  
SSS=117  
**Z=???**

You gave the pattern a timezone part, but your log doesn't include it, so the pattern fails.

---

<div class="post-metadata">

**Author:** ![wentao](https://avatars.discourse-cdn.com/v4/letter/w/a9adbd/32.png) [@wentao](https://discuss.elastic.co/u/wentao)\
**Post date:** [April 3, 2018, 5:52am UTC](https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074/3 "2018-04-03T05:52:45Z")

</div>

thank you very very much

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 1, 2018, 5:52am UTC](https://discuss.elastic.co/t/i-got-a-tags-dateparsefailure-in-my-logstash-rubydebug/126074/4 "2018-05-01T05:52:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.