# Invalid format: \[yyyy-MM-ddTHH:mm:ssZ\]: Unknown pattern letter: T"

**URL:** <https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874>\
**Category:** Logstash\
**Created:** [January 12, 2021, 5:19pm UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874 "2021-01-12T17:19:27Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vaclav1](https://avatars.discourse-cdn.com/v4/letter/v/c68b51/32.png) [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Post date:** [January 12, 2021, 5:19pm UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874/1 "2021-01-12T17:19:28Z")

</div>

Hello team,

strange thing happened. I have following mapping for the field in els with multiple formats:

```auto
"createdAt" : {
                  "type" : "date",
                  "format" : "yyyy-MM-dd HH:mm:ssZ||yyyy-MM-dd HH:mm:ss Z||yyyy-MM-dd HH:mm:ss a Z||yyyy-MM-dd a HH:mm:ss Z||yyyy-MM-dd'T'HH:mm:ssZ||yyyy-MM-dd HH:mm:ss a, Z"
                }

```

Unfortunately when I try to update it and append one more format I got:

```auto
{
  "error" : {
    "root_cause" : [
      {
        "type" : "illegal_argument_exception",
        "reason" : "Error parsing [format] on field [data_event_generalSessionData_lastSessionTimeStamp]: Invalid format: [yyyy-MM-ddTHH:mm:ssZ]: Unknown pattern letter: T"
      }
    ],
    "type" : "illegal_argument_exception",
    "reason" : "Error parsing [format] on field [data_event_generalSessionData_lastSessionTimeStamp]: Invalid format: [yyyy-MM-ddTHH:mm:ssZ]: Unknown pattern letter: T",
    "caused_by" : {
      "type" : "illegal_argument_exception",
      "reason" : "Invalid format: [yyyy-MM-ddTHH:mm:ssZ]: Unknown pattern letter: T",
      "caused_by" : {
        "type" : "illegal_argument_exception",
        "reason" : "Unknown pattern letter: T"
      }
    }
  },
  "status" : 400
}

```

Added pattern is: `yyyy-MM-dd'T'HH:mm:ssz`

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 12, 2021, 11:45pm UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874/2 "2021-01-12T23:45:09Z")

</div>

What version are you on?  
I just ran this with no issues on 7.10.1;

```auto
PUT test/
{
  "mappings": {
    "properties": {
      "date": {
        "type": "date",
        "format": "yyyy-MM-dd HH:mm:ssZ||yyyy-MM-dd HH:mm:ss Z||yyyy-MM-dd HH:mm:ss a Z||yyyy-MM-dd a HH:mm:ss Z||yyyy-MM-dd'T'HH:mm:ssZ||yyyy-MM-dd HH:mm:ss a, Z"
      }
    }
  }
}

```

Response;

```auto
{
  "acknowledged" : true,
  "shards_acknowledged" : true,
  "index" : "test"
}

```

---

<div class="post-metadata">

**Author:** ![vaclav1](https://avatars.discourse-cdn.com/v4/letter/v/c68b51/32.png) [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Post date:** [January 13, 2021, 7:45am UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874/3 "2021-01-13T07:45:30Z")

</div>

7.9.2 we run, all elk stack products elastic, kibana and logstash..

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 10, 2021, 7:45am UTC](https://discuss.elastic.co/t/invalid-format-yyyy-mm-ddthhssz-unknown-pattern-letter-t/260874/4 "2021-02-10T07:45:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.