# Logstash date filter match pattern
**URL:** https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458
**Category:** Logstash
**Created:** [February 21, 2020, 9:53pm UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458 "2020-02-21T21:53:23Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@vikasp](https://discuss.elastic.co/u/vikasp)
#### Post date: [February 21, 2020, 9:53pm UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458/1 "2020-02-21T21:53:23Z")
Hi,
I have a logstash config that pulls from jdbc and pushes it to elasticsearch based on the select statement where my tracking column is an attribute mod\_dttm (Example: 23-JAN-20 12.23.28.771000000 PM).
So, I created a filter as below:
```
filter {
mutate {
add_field => {
"[@metadata][mod_dttm]" => "%{mod_dttm}"
}
}
date {
locale => "en"
timezone => "UTC"
match => ["mod_dttm", "dd-MMM-yy hh.mm.ss.SSSSSSSSS a"]
target => "@timestamp"
}
}
```
I am getting \_dateparsefailure. Can somebody please help. When I see/search the documents, the mod\_dttm is in this format in the elasticsearch `"yyyy-MM-dd'T'HH24:mm:ss.SSS'Z'"`
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [February 21, 2020, 10:13pm UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458/2 "2020-02-21T22:13:46Z")
hh can have values from 0 to 11. 12 is not valid. Use HH instead.
---
### Author:  [@vikasp](https://discuss.elastic.co/u/vikasp)
#### Post date: [February 21, 2020, 10:41pm UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458/3 "2020-02-21T22:41:11Z")
Still getting the same error \_dateparsefailure
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [February 22, 2020, 12:40am UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458/4 "2020-02-22T00:40:23Z")
```
input { generator { count => 1 lines => [''] } }
filter {
mutate { add_field => { "mod_dttm" => "23-JAN-20 12.23.28.771000000 PM" } }
date {
locale => "en"
timezone => "UTC"
match => ["mod_dttm", "dd-MMM-yy HH.mm.ss.SSSSSSSSS a"]
target => "@timestamp"
}
}
output { stdout { codec => rubydebug { metadata => false } } }
```
gets me
```
"@timestamp" => 2020-01-23T12:23:28.771Z,
```
So something is not as you describe it.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 21, 2020, 12:40am UTC](https://discuss.elastic.co/t/logstash-date-filter-match-pattern/220458/5 "2020-03-21T00:40:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.