# message=\>"Failed parsing date from field", :field=\>"timestamp", :value=\>"2016-09-14 15:43:48.258000", :exception=\>"Invalid format: \\"2016-09-14 15:43:48.258000\\"",
**URL:** https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528
**Category:** Logstash
**Created:** [September 14, 2016, 3:57pm UTC](https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528 "2016-09-14T15:57:51Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@gentitope](https://discuss.elastic.co/u/gentitope)
#### Post date: [September 14, 2016, 3:57pm UTC](https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528/1 "2016-09-14T15:57:51Z")
Hello,
I have this error,
{:timestamp=\>"2016-09-14T16:43:48.937000+0100", :message=\>"Failed parsing date from field", :field=\>"timestamp", :value=\>"2016-09-14 15:43:48.258000", :exception=\>"Invalid format: "2016-09-14 15:43:48.258000"", :config\_parsers=\>"ISO8601,yyyy-MM-dd'T'HH:mm:ss.SSSZZ,yyyy-MM-dd HH:mm:ss,SSS,MMM dd YYYY HH:mm:ss", :config\_locale=\>"default=en\_US", :level=\>:warn}
my filter config"
grok {
add\_tag =\> ["valid"]
match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:log\_timestamp} %{DATA} Processed (?:inbound|outbound) message for ([^\s]+): %{GREEDYDATA:json\_data}" }
}
```
json {
source => json_data
}
date {
match => ["timestamp","ISO8601","yyyy-MM-dd'T'HH:mm:ss.SSSZZ","yyyy-MM-dd HH:mm:ss,SSS","MMM dd YYYY HH:mm:ss"]
remove_field => ["timestamp"]
target => "@timestamp"
```
Someone Help.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 15, 2016, 5:45am UTC](https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528/2 "2016-09-15T05:45:21Z")
Since you have microsecond precision in your input I expect you need `SSSSSS` instead of just `SSS`.
---
### Author:  [@gentitope](https://discuss.elastic.co/u/gentitope)
#### Post date: [September 15, 2016, 8:43am UTC](https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528/3 "2016-09-15T08:43:34Z")
Thanks for your response.
I tried adding the "SSSSSS" but the error returned this :
{:timestamp=\>"2016-09-15T09:33:12.980000+0100", :message=\>"Failed parsing date from field", :field=\>"timestamp", :value=\>"2016-09-15 08:33:05.813000", :exception=\>"Invalid format: "2016-09-15 08:33:05.813000"", :config\_parsers=\>"ISO8601,yyyy-MM-dd'T'HH:mm:ss.SSSSSSZZ,yyyy-MM-dd HH:mm:ss,SSSSSS,MMM dd YYYY HH:mm:ss", :config\_locale=\>"default=en\_US", :level=\>:warn}
I noticed that when i changed the comma "yyyy-MM-dd HH:mm:ss,SSSSSS" to dot "yyyy-MM-dd HH:mm:ss.SSSSSS". Logstash started and does not returned the error but kibana stopped visualizing. Once i returned the comma kibana started working again and logstash started giving the error again.
Could this issue attach to elasticsearch mapping?
Elasticsearch mapping:
"@timestamp": {
"format": "yyyy-MM-dd'T'HH:mm:ss.SSSZ",
"index": "not\_analyzed",
"type": "date"
},
Thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:38am UTC](https://discuss.elastic.co/t/message-failed-parsing-date-from-field-field-timestamp-value-2016-09-14-15-43-48-258000-exception-invalid-format-2016-09-14-15-43-48-258000/60528/4 "2017-07-06T04:38:19Z")