# Kibana TIMESTAMP parse error? **URL:** \ **Category:** Kibana\ **Created:** [May 31, 2017, 5:01pm UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786 "2017-05-31T17:01:43Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Post date:** [May 31, 2017, 5:01pm UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/1 "2017-05-31T17:01:44Z")
Hi, I am ingesting documents into ES through logstash with the `TIMESTAMP` field in this format: yyyy-MM-dd HH:mm:ss,SSS . When i visualize the same in the KIBANA using date histogram it is showing error like this: ``` Visualize: failed to parse date field [1495747020000] with format [yyyy-MM-dd HH:mm:ss,SSS] ``` ![](https://us1.discourse-cdn.com/elastic/original/3X/f/9/f96b137a333b9be051eb8dadc1e6e14a6bbf8128.png) When i seen in my ES logs i am getting like this: ``` [2017-05-31 22:27:51,519][DEBUG][action.search] [Headlok] All shards failed for phase: [query] RemoteTransportException[[Headlok][127.0.0.1:9300][indices:data/read/search[phase/query]]]; nested: ElasticsearchParseException[failed to parse date field [1495747020000] with format [yyyy-MM-dd HH:mm:ss,SSS]]; nested: IllegalArgumentException[Invalid format: "1495747020000" is malformed at "0000"]; Caused by: ElasticsearchParseException[failed to parse date field [1495747020000] with format [yyyy-MM-dd HH:mm:ss,SSS]]; nested: IllegalArgumentException[Invalid format: "1495747020000" is malformed at "0000"]; at org.elasticsearch.common.joda.DateMathParser.parseDateTime(DateMathParser.java:203) at org.elasticsearch.common.joda.DateMathParser.parse(DateMathParser.java:67) at org.elasticsearch.index.mapper.core.DateFieldMapper$DateFieldType.parseToMilliseconds(DateFieldMapper.java:457) at org.elasticsearch.index.mapper.core.DateFieldMapper$DateFieldType.innerRangeQuery(DateFieldMapper.java:440) at org.elasticsearch.index.mapper.core.DateFieldMapper$DateFieldType.access$000(DateFieldMapper.java:201) at org.elasticsearch.index.mapper.core.DateFieldMapper$DateFieldType$LateParsingQuery.rewrite(DateFieldMapper.java:228) at org.apache.lucene.search.BooleanQuery.rewrite(BooleanQuery.java:278) at org.apache.lucene.search.IndexSearcher.rewrite(IndexSearcher.java:837) at org.elasticsearch.search.internal.ContextIndexSearcher.rewrite(ContextIndexSearcher.java:81) at org.elasticsearch.search.internal.DefaultSearchContext.preProcess(DefaultSearchContext.java:231) at org.elasticsearch.search.query.QueryPhase.preProcess(QueryPhase.java:103) at org.elasticsearch.search.SearchService.createContext(SearchService.java:689) at org.elasticsearch.search.SearchService.createAndPutContext(SearchService.java:633) at org.elasticsearch.search.SearchService.executeQueryPhase(SearchService.java:377) at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:368) at org.elasticsearch.search.action.SearchServiceTransportAction$SearchQueryTransportHandler.messageReceived(SearchServiceTransportAction.java:365) at org.elasticsearch.transport.TransportRequestHandler.messageReceived(TransportRequestHandler.java:33) at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:77) at org.elasticsearch.transport.TransportService$4.doRun(TransportService.java:376) at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.lang.Thread.run(Unknown Source) Caused by: java.lang.IllegalArgumentException: Invalid format: "1495747020000" is malformed at "0000" at org.joda.time.format.DateTimeParserBucket.doParseMillis(DateTimeParserBucket.java:187) at org.joda.time.format.DateTimeFormatter.parseMillis(DateTimeFormatter.java:826) at org.elasticsearch.common.joda.DateMathParser.parseDateTime(DateMathParser.java:200) ... 22 more ``` How can i avoid this error? Whether i have to do any manipulations in the logstash.conf file? Thanks ---
**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\ **Post date:** [May 31, 2017, 6:14pm UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/2 "2017-05-31T18:14:16Z")
Can you share your mappings for the TIMESTAMP field? Are documents with that field in the same format? ---
**Author:** ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Post date:** [June 1, 2017, 2:48am UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/3 "2017-06-01T02:48:01Z")
Thanks @jbudz These are the mappings of the `TIMESTAMP` field . Default it is coming as string so i edited the mappings and reindexed it again with the below mapping. ``` "TIMESTAMP": { "type": "date", "format": "yyyy-MM-dd HH:mm:ss,SSS", },​ ``` It is in this format `2017-05-31 22:27:51,519`. Thanks ---
**Author:** ![shreyanshu\_pare](https://avatars.discourse-cdn.com/v4/letter/s/f4b2a3/32.png) [@shreyanshu\_pare](https://discuss.elastic.co/u/shreyanshu_pare)\ **Post date:** [June 1, 2017, 8:55am UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/4 "2017-06-01T08:55:07Z")
Put Like "yyyy-mm-ddTHH:mm:ss" or follow link :- [http://momentjs.com/docs/#/displaying/format/](http://momentjs.com/docs/#/displaying/format/) ---
**Author:** ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Post date:** [June 1, 2017, 9:00am UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/5 "2017-06-01T09:00:16Z")
The format which you had given is not suitable for my TIMESTAMP field. Thanks ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 29, 2017, 9:00am UTC](https://discuss.elastic.co/t/kibana-timestamp-parse-error/87786/6 "2017-06-29T09:00:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.