# Logstash Data parsing error - \_dateparsefailure
**URL:** https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492
**Category:** Logstash
**Created:** [June 30, 2017, 8:48pm UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492 "2017-06-30T20:48:39Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)
#### Post date: [June 30, 2017, 8:48pm UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492/1 "2017-06-30T20:48:39Z")
I am trying to parse the Time format "timestamp" =\> "27/06/17 11:19:53:053 EDT" - I tried the following match pattarns in Logstash Filter but I am getting \_dateparsefailure error
**Filter in Logstash:**
**------------------------**
filter {
if [type] == "app-log"
{
```
grok {
match => ["message", "\[%{GREEDYDATA:timestamp}\] %{GREEDYDATA:message}"]
}
date {
locale => "en"
#match => ["timestamp", "dd/MM/yy HH:mm:ss:SSS Z"]
match => ["timestamp", "ISO8601"]
timezone => "UTC"
target => "@logtimestamp"
}
}
}
```
**Data output in stdout:**
**--------------------------------**
"@timestamp" =\> 2017-06-30T20:47:14.468Z,
"offset" =\> 949,
"@version" =\> "1",
"input\_type" =\> "log",
"beat" =\> {
"hostname" =\> "XXXXXXXXXXXX",
"name" =\> "XXXXXXXXXX",
"version" =\> "5.2.2"
},
"host" =\> "XXXXXXXXXXXXX",
"source" =\> "D:\ELK\filebeat\source\YYYY.log",
"message" =\> [[XXXXXXXXXXXX],
"type" =\> "app-log",
"tags" =\> [
[0] "beats\_input\_codec\_plain\_applied",
[1] **"\_dateparsefailure**"
],
"timestamp" =\> "27/06/17 11:19:53:053 EDT"
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 3, 2017, 5:36am UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492/4 "2017-07-03T05:36:47Z")
The Logstash log should contain information about what the date filter finds objectionable, but you can start by deleting
```
match => ["timestamp", "ISO8601"]
```
since your timestamp clearly isn't ISO8601, and then reinstating
```
match => ["timestamp", "dd/MM/yy HH:mm:ss:SSS Z"]
```
which should be okay except that the date filter can't parse timezone names like EDT.
---
### Author:  [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)
#### Post date: [July 6, 2017, 7:13pm UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492/5 "2017-07-06T19:13:00Z")
Thanks for the reply. It worked for me!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 3, 2017, 7:26pm UTC](https://discuss.elastic.co/t/logstash-data-parsing-error--dateparsefailure/91492/6 "2017-08-03T19:26:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.