# Logstash dateparsefailure

**URL:** <https://discuss.elastic.co/t/logstash-dateparsefailure/247191>\
**Category:** Logstash\
**Created:** [September 2, 2020, 8:34am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191 "2020-09-02T08:34:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Orest\_Gulman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/orest_gulman/32/46463_2.png) [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Post date:** [September 2, 2020, 8:34am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191/1 "2020-09-02T08:34:24Z")

</div>

Hi.  
My log timestamp has a format `Sep 2, 2020 @ 11:14:00.000`  
When I'm trying to parse it in logstash config I'm getting an error `_dateparsefailure`

```auto
   date {
       target => "@timestamp"
       match => ["timestamp", "MMM dd, yyyy @ hh:mm:ss.SSS"]
    }

```

I can configure the index pattern in Kibana to use `timestamp` as the timestamp field, but it would be great if someone explains what I'm going wrong.  
Thanks.

---

<div class="post-metadata">

**Author:** ![Orest\_Gulman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/orest_gulman/32/46463_2.png) [@Orest\_Gulman](https://discuss.elastic.co/u/Orest_Gulman)\
**Post date:** [September 2, 2020, 9:24am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191/2 "2020-09-02T09:24:17Z")

</div>

`stdout { codec => rubydebug }` shows `"timestamp" => "2020-09-02T09:13:00.000Z",`  
I solve it by firstly converting `timestamp` to string and then parse it using `ISO8601` pattern.

```auto
    mutate {
      convert => {"timestamp" => "string"}
    }
    date {
      match => ["timestamp", "ISO8601"]
    }

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 30, 2020, 9:24am UTC](https://discuss.elastic.co/t/logstash-dateparsefailure/247191/3 "2020-09-30T09:24:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.