# Parse line error: parsing CRI timestamp with filebeat 7.9.3

**URL:** https://discuss.elastic.co/t/parse-line-error-parsing-cri-timestamp-with-filebeat-7-9-3/274666
**Category:** Beats
**Tags:** filebeat
**Created:** [June 1, 2021, 5:14pm UTC](https://discuss.elastic.co/t/parse-line-error-parsing-cri-timestamp-with-filebeat-7-9-3/274666 "2021-06-01T17:14:14Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Usman18](https://avatars.discourse-cdn.com/v4/letter/u/0ea827/32.png) [@Usman18](https://discuss.elastic.co/u/Usman18)
#### Post date: [June 1, 2021, 5:14pm UTC](https://discuss.elastic.co/t/parse-line-error-parsing-cri-timestamp-with-filebeat-7-9-3/274666/1 "2021-06-01T17:14:14Z")

</div>

I am using filebeat 7.9.3. The logs are being transferred to kafka. But I see an error in the logs inside docker container of filebeat. The error details are given below:

```
filebeat_1 | 2021-06-01T17:10:20.272Z	INFO	log/harvester.go:299	Harvester started for file: /var/lib/docker/containers/5c6dd579cd192cd56e1cc002f2c2250b080cc2ce5d962f4eafbcf1d2cfdc9eb7/5c6dd579cd192cd56e1cc002f2c2250b080cc2ce5d962f4eafbcf1d2cfdc9eb7-json.log
filebeat_1 | 2021-06-01T17:10:20.272Z	ERROR	[reader_docker_json]	readjson/docker_json.go:204	Parse line error: parsing CRI timestamp: parsing time "this" as "2006-01-02T15:04:05.999999999Z07:00": cannot parse "this" as "2006"
filebeat_1 | 2021-06-01T17:10:20.272Z	INFO	log/harvester.go:332	Skipping unparsable line in file: /var/lib/docker/containers/5c6dd579cd192cd56e1cc002f2c2250b080cc2ce5d962f4eafbcf1d2cfdc9eb7/5c6dd579cd192cd56e1cc002f2c2250b080cc2ce5d962f4eafbcf1d2cfdc9eb7-json.log
filebeat_1 | 2021-06-01T17:10:32.541Z	INFO	log/harvester.go:299	Harvester started for file: /var/lib/docker/containers/1a9ba2cf2d9eaa2ff616b5b089abaf59bf3a734a580aedc74620e2e9b0560f71/1a9ba2cf2d9eaa2ff616b5b089abaf59bf3a734a580aedc74620e2e9b0560f71-json.log
filebeat_1 | 2021-06-01T17:10:35.794Z	INFO	log/harvester.go:330	File is inactive: /var/lib/docker/containers/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107-json.log. Closing because close_inactive of 5m0s reached.
filebeat_1 | 2021-06-01T17:10:40.795Z	INFO	log/harvester.go:299	Harvester started for file: /var/lib/docker/containers/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107-json.log
filebeat_1 | 2021-06-01T17:10:40.795Z	ERROR	[reader_docker_json]	readjson/docker_json.go:204	Parse line error: parsing CRI timestamp: parsing time "=10.0.97.200," as "2006-01-02T15:04:05.999999999Z07:00": cannot parse "=10.0.97.200," as "2006"
filebeat_1 | 2021-06-01T17:10:40.795Z	INFO	log/harvester.go:332	Skipping unparsable line in file: /var/lib/docker/containers/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107/aa7feac0721e8257dce89270b09e71be57a6c194346b516175d841fa5a8dd107-json.log

```

Can anyone guide me in this regard. The error appears in the logs of the filebeat container. This line tells us what kind of problem is occuring:

`filebeat_1 | 2021-06-01T17:10:20.272Z	ERROR	[reader_docker_json]	readjson/docker_json.go:204	Parse line error: parsing CRI timestamp: parsing time "this" as "2006-01-02T15:04:05.999999999Z07:00": cannot parse "this" as "2006"`

But I am unable to figure it out. Can anyone guide me ? Thanks

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 29, 2021, 7:15pm UTC](https://discuss.elastic.co/t/parse-line-error-parsing-cri-timestamp-with-filebeat-7-9-3/274666/2 "2021-06-29T19:15:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
