# Parse Date with RFC\_1123\_DATE\_TIME format

**URL:** https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863
**Category:** Kibana
**Created:** [February 17, 2023, 4:43pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863 "2023-02-17T16:43:05Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![valleram](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/valleram/32/48248_2.png) [@valleram](https://discuss.elastic.co/u/valleram)
#### Post date: [February 17, 2023, 4:43pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/1 "2023-02-17T16:43:05Z")

</div>

Hi All,

I'm ingesting documents to my ES cluster with a field called **CREATION\_TIME** with format **Wed, 13 Oct 2021 13:04:54 GMT**.  
I've tried to parse it using below mappings, but Kibana is still ignoring the value.

> {  
> "properties": {  
> "CREATION\_TIME": {  
> "format": "EEE, dd MMM yyyy hh:mm:ss zzz||EEE, dd MMM yyyy hh:mm:ss 'GMT'",  
> "index": true,  
> "ignore\_malformed": true,  
> "store": false,  
> "type": "date",  
> "doc\_values": true  
> }  
> }  
> }

Please your help to get the correct mappings for this date field.

Thank you!  
Jesus

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [February 17, 2023, 5:05pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/2 "2023-02-17T17:05:12Z")

</div>

What is the error you are getting? Please share the error.

Also, it is `HH`, not `hh` for the hour.

---

<div class="post-metadata">

### Author: ![valleram](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/valleram/32/48248_2.png) [@valleram](https://discuss.elastic.co/u/valleram)
#### Post date: [February 17, 2023, 6:15pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/3 "2023-02-17T18:15:07Z")

</div>

Hi @leandrojmp,

I'm not getting any error, the problem is that the field is being ignored for some of my documents, even if they have the format I've specified in the mappings.

See below example:

1 - For below document **CREATION\_TIME** field is being ignored.

```auto
> {
> "_index" : "tta-test",
> "_type" : "_doc",
> "_id" : "r0waWoYBVHApIjHukmqM",
> "_score" : 0.0,
> "_ignored" : [
> "CREATION_TIME"
> ],
> "_source" : {
> "ID" : 1738,
> "ADDED_TO_TEAM_TIME" : "Wed, 20 Apr 2022 14:05:21 GMT",
> "REVOKED_BY_NAME" : null,
> "REVOKED_FROM_TEAM_TIME" : null,
> "function_within_team_label" : "Team Member",
> "CREATION_TIME" : "Wed, 20 Apr 2022 14:05:23 GMT",
> "MODIFIED_BY_PRID" : null,
> "MODIFICATION_TIME" : null,
> "DELETED_BY_PRID" : null,
> "DELETION_TIME" : null,
> "IS_DELETED" : false,
> }
> },

```

1. Below document is being processed without any issue.

```auto
{
        "_index" : "tta-test",
        "_type" : "_doc",
        "_id" : "n0waWoYBVHApIjHukmqM",
        "_score" : 1.0,
        "_source" : {
          "ID" : 320,
          "ADDED_TO_TEAM_TIME" : "Wed, 25 Aug 2021 11:51:00 GMT",
          "REVOKED_BY_PRID" : null,
          "REVOKED_BY_NAME" : null,
          "REVOKED_FROM_TEAM_TIME" : null,
          "function_within_team_label" : "Team Lead",
          "CREATION_TIME" : "Wed, 25 Aug 2021 11:52:25 GMT",
          "MODIFIED_BY_PRID" : null,
          "MODIFICATION_TIME" : null,
          "DELETED_BY_PRID" : null,
          "DELETION_TIME" : null,
          "IS_DELETED" : false,
        }
      }

```

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [February 17, 2023, 6:43pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/4 "2023-02-17T18:43:05Z")

</div>

> [@valleram](#):
>
> I'm not getting any error, the problem is that the field is being ignored for some of my documents, even if they have the format I've specified in the mappings.

Did you recreate the index with the mapping using `HH` ?

If I'm not wrong `hh` will get only `01-12` and `HH` will get `00-23`, this seems to be the issue.

Your rejected document has the hour as `14`, which won't match if you are using `hh`, and the one that worked has the hour as `11`, which would match `hh`.

The time mapping needs to be `HH:mm:ss`, not `hh:mm:ss`

---

<div class="post-metadata">

### Author: ![valleram](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/valleram/32/48248_2.png) [@valleram](https://discuss.elastic.co/u/valleram)
#### Post date: [February 17, 2023, 7:03pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/5 "2023-02-17T19:03:42Z")

</div>

Thank you @leandrojmp, after changing the `hh` for `HH` solved my issue.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 17, 2023, 7:03pm UTC](https://discuss.elastic.co/t/parse-date-with-rfc-1123-date-time-format/325863/6 "2023-03-17T19:03:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
