### Author:  [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)
#### Post date: [November 20, 2017, 4:01pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/3 "2017-11-20T16:01:58Z")
> [@chrisronline](#):
>
> curl -XGET \/timetesting/\_mappings
{
"timetestplswork": {
"mappings": {
"logs": {
"properties": {
"@timestamp": {
"type": "date"
},
"@version": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"connection\_protocol": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"dstip": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"dstport": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"host": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"message": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"path": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"protocol": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"srcip": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"srcport": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"tags": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"timestamp": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
}
}
}
}
}
}
FOR:
input {
file {
path =\> "\*\*\*\*\*\*"
start\_position =\> "beginning"
sincedb\_path =\> "/dev/null"
}
}
filter {
csv {
separator =\> ","
#connection\_type, connection\_protocol, protocol, srcip, srcport, dstip, dstport, hostname
columns =\> ["timestamp","connection\_protocol","protocol","srcip","srcport","dstip","dstport","hostname"]
}
date{
match =\> ["timestamp", "dd/MM/yyyy HH:mm:ss"]
timezone =\> "UTC"
}
}
output {
elasticsearch {
hosts =\> "[http://localhost:9200](http://localhost:9200)"
index =\> "timetestplswork"
}
stdout {}
}
---
### Author:  [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [November 20, 2017, 4:20pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/4 "2017-11-20T16:20:51Z")
> [@I\_like\_dogs](#):
>
> "timestamp": {
>
> "type": "text",
>
> "fields": {
>
> "keyword": {
>
> "type": "keyword",
>
> "ignore\_above": 256
>
> }
>
> }
Try using the [date datatype](https://www.elastic.co/guide/en/elasticsearch/reference/current/date.html) instead. Then, Kibana will understand that it is a date field and allow the appropriate aggregations.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [November 20, 2017, 4:32pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/5 "2017-11-20T16:32:59Z")
> [@I\_like\_dogs](#):
>
> match =\> ["timedate", "dd/MM/yyyy HH:mm:ss"]
Your timestamps do not have a seconds field, so this does not match. I see the events having a \_dateparsefailure tag. Use dd/MM/yyyy HH:mm.
---
### Author:  [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)
#### Post date: [November 20, 2017, 9:26pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/6 "2017-11-20T21:26:43Z")
I copied and pasted the first lines off excel, my mistake. when you double click on the cells there is the seconds
---
### Author:  [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)
#### Post date: [November 22, 2017, 11:45am UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/7 "2017-11-22T11:45:54Z")
Hi Chris, I'm new to elasticsearch/Kibana
Do I use this in the Dev tools?
---
### Author:  [@chrisronline](https://discuss.elastic.co/u/chrisronline)
#### Post date: [November 22, 2017, 8:05pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/8 "2017-11-22T20:05:21Z")
Yup!
You'll want to create a new index and [set the appropriate mappings](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-put-mapping.html).
Then you can try [reindexing](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html) your existing index to this new index.
After that, create an index pattern in Kibana using the new index and see if you can do time analysis on your logs.
---
### Author:  [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)
#### Post date: [November 24, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/9 "2017-11-24T13:45:01Z")
thank you!!! it worked 🙂
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 22, 2017, 1:45pm UTC](https://discuss.elastic.co/t/kibana-wont-recognize-my-time-and-date-filed-as-a-time-and-date/108140/10 "2017-12-22T13:45:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.