# Kibana ML

**URL:** <https://discuss.elastic.co/t/kibana-ml/159080>\
**Category:** Kibana\
**Tags:** elastic-stack-machine-learning\
**Created:** [December 3, 2018, 3:14am UTC](https://discuss.elastic.co/t/kibana-ml/159080 "2018-12-03T03:14:51Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![apremgeorge](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/32.png) [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\
**Post date:** [December 3, 2018, 3:14am UTC](https://discuss.elastic.co/t/kibana-ml/159080/1 "2018-12-03T03:14:51Z")

</div>

i am using kibana 6.5, in machine learning i have uploaded a time series data, one column is date and other is currency value, while indexing i have selected the date column as time filed, but showing error as index pattern \* is not time based, may i know how to set it? Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 3, 2018, 3:16am UTC](https://discuss.elastic.co/t/kibana-ml/159080/2 "2018-12-03T03:16:17Z")

</div>

[https://www.elastic.co/guide/en/kibana/current/tutorial-define-index.html](https://www.elastic.co/guide/en/kibana/current/tutorial-define-index.html) should help you out.

---

<div class="post-metadata">

**Author:** ![apremgeorge](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/32.png) [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\
**Post date:** [December 3, 2018, 3:22am UTC](https://discuss.elastic.co/t/kibana-ml/159080/3 "2018-12-03T03:22:36Z")

</div>

Thanks for that, Date field in the image set as string, i can't edit through the link, may i know how to set that,Thanks

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/0/c0f89acaf6431d03ef936778e2fdd60fc4e2df3a.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 3, 2018, 3:28am UTC](https://discuss.elastic.co/t/kibana-ml/159080/4 "2018-12-03T03:28:22Z")

</div>

You need to use a mapping in Elasticsearch to set it before the data is passed in, you can't change it once it is there.

How are you sending data to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![apremgeorge](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/32.png) [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\
**Post date:** [December 3, 2018, 3:30am UTC](https://discuss.elastic.co/t/kibana-ml/159080/5 "2018-12-03T03:30:40Z")

</div>

Hi have uploaded via ML, from there created the inedx name and imported  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea3b3daf09bd981896583de7940217a485c77066.png)

---

<div class="post-metadata">

**Author:** ![apremgeorge](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/32.png) [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\
**Post date:** [December 3, 2018, 3:33am UTC](https://discuss.elastic.co/t/kibana-ml/159080/6 "2018-12-03T03:33:30Z")

</div>

After loading data, i select Time Field in override setting the Date column as in the image ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/9/69b2a8e4131357798f6907ffb3d80959ae25b7f4.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 3, 2018, 3:53am UTC](https://discuss.elastic.co/t/kibana-ml/159080/7 "2018-12-03T03:53:34Z")

</div>

You will need to delete the index that already exists and reprocess the file,

---

<div class="post-metadata">

**Author:** ![apremgeorge](https://avatars.discourse-cdn.com/v4/letter/a/9d8465/32.png) [@apremgeorge](https://discuss.elastic.co/u/apremgeorge)\
**Post date:** [December 3, 2018, 4:15am UTC](https://discuss.elastic.co/t/kibana-ml/159080/8 "2018-12-03T04:15:19Z")

</div>

Actually, when you load a fresh file, this is the page we are getting, may i know which index you were mentioning please

---

<div class="post-metadata">

**Author:** ![bryan\_stuhlsatz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bryan_stuhlsatz/32/49123_2.png) [@bryan\_stuhlsatz](https://discuss.elastic.co/u/bryan_stuhlsatz)\
**Post date:** [December 3, 2018, 7:25am UTC](https://discuss.elastic.co/t/kibana-ml/159080/9 "2018-12-03T07:25:25Z")

</div>

If your "Date" field is still a string, you have not setup a template or a mapping for your index. You can look at: [https://www.elastic.co/guide/en/elasticsearch/reference/6.5/indices-templates.html](https://www.elastic.co/guide/en/elasticsearch/reference/6.5/indices-templates.html).

You need to have a mapping that says that the Date field is of type date. Below is an example. Dates come in many formats and you need to match what is being ingested.

PUT \_template/bryan  
{  
"index\_patterns": ["bry\*"],  
"settings": {  
"number\_of\_shards": 1,  
"number\_of\_replicas": 0  
},  
"mappings": {  
"doc": {  
"\_source": {  
"enabled": true  
},  
"properties": {  
"time": {"type": "date", "format": "MM-dd-yyyy HH:mm" },  
"temperature": {"type": "integer"},  
"humidity": {"type": "integer"}  
}  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [December 3, 2018, 4:15pm UTC](https://discuss.elastic.co/t/kibana-ml/159080/10 "2018-12-03T16:15:12Z")

</div>

The "File Visualizer" is an experimental feature. You can see from the docs: [https://www.elastic.co/guide/en/elasticsearch/reference/current/ml-find-file-structure.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/ml-find-file-structure.html) that it will properly guess the following date formats:

- `dd/MMM/YYYY:HH:mm:ss Z`
- `EEE MMM dd HH:mm zzz YYYY`
- `EEE MMM dd HH:mm:ss YYYY`
- `EEE MMM dd HH:mm:ss zzz YYYY`
- `EEE MMM dd YYYY HH:mm zzz`
- `EEE MMM dd YYYY HH:mm:ss zzz`
- `EEE, dd MMM YYYY HH:mm Z`
- `EEE, dd MMM YYYY HH:mm ZZ`
- `EEE, dd MMM YYYY HH:mm:ss Z`
- `EEE, dd MMM YYYY HH:mm:ss ZZ`
- `ISO8601`
- `MMM d HH:mm:ss`
- `MMM d HH:mm:ss,SSS`
- `MMM d YYYY HH:mm:ss`
- `MMM dd HH:mm:ss`
- `MMM dd HH:mm:ss,SSS`
- `MMM dd YYYY HH:mm:ss`
- `MMM dd, YYYY h:mm:ss a`
- `TAI64N`
- `UNIX`
- `UNIX_MS`
- `YYYY-MM-dd HH:mm:ss`
- `YYYY-MM-dd HH:mm:ss,SSS`
- `YYYY-MM-dd HH:mm:ss,SSS Z`
- `YYYY-MM-dd HH:mm:ss,SSSZ`
- `YYYY-MM-dd HH:mm:ss,SSSZZ`
- `YYYY-MM-dd HH:mm:ssZ`
- `YYYY-MM-dd HH:mm:ssZZ`
- `YYYYMMddHHmmss`

Notice that your timestamp format does not fall into one of those.

`2/01/2014` could be 1st February or 2nd January, depending on the user's locale.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 31, 2018, 4:15pm UTC](https://discuss.elastic.co/t/kibana-ml/159080/11 "2018-12-31T16:15:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
