Ingest date with 12 hour format

Elastic Stack Elasticsearch
4

Here is an example:

POST _ingest/pipeline/_simulate
{
  "pipeline": {
    "processors": [
      {
        "date": {
          "field": "date",
          "formats": [
            "M/d/yyyy h:m:s a"
          ]
        }
      }
    ]
  },
  "docs": [
    {
      "_source": {
        "date": "7/9/2019 4:29:55 PM"
      }
    }
  ]
}

Don't use "ignore_failure": true as this is hiding important error messages.
Note the change: HH is meant for 24 hours. With AM/PM you need to use 12 hours: h.

1 Like