# Problem Parsing Date field

**URL:** <https://discuss.elastic.co/t/problem-parsing-date-field/188427>\
**Category:** Logstash\
**Created:** [July 2, 2019, 2:40am UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427 "2019-07-02T02:40:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pranay\_Garg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pranay_garg/32/49232_2.png) [@Pranay\_Garg](https://discuss.elastic.co/u/Pranay_Garg)\
**Post date:** [July 2, 2019, 2:40am UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/1 "2019-07-02T02:40:46Z")

</div>

I am trying to match date format Mon Jul 04 22:48:23 2019 using date filter in logstash but it is showing as string in kibana. Can Someone point out the mistake. Thanks

```
	date
{
	match => ["selling_date" , "EEE MMM d HH:mm:ss YYYY","EEE MMM dd HH:mm:ss YYYY"]
	target => "selling_date"
}
```

---

<div class="post-metadata">

**Author:** ![Pranay\_Garg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pranay_garg/32/49232_2.png) [@Pranay\_Garg](https://discuss.elastic.co/u/Pranay_Garg)\
**Post date:** [July 2, 2019, 11:10am UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/2 "2019-07-02T11:10:20Z")

</div>

I have boiled down it to Jul 04 22:48:23 2019 and my new date filter is

```
	date
{
	match => ["selling_date" , "MMM d H:mm:ss YYYY","MMM dd H:mm:ss YYYY"]
	target => "selling_date"
}

```

Now logstash is reading the date as:

```
"selling_date" => 2019-07-04T17:18:23.000Z

```

It is running 5:30 hours behind. I have tried some timezones as well, but it is not showing correct time. It's Urgent. Any kind of help is appreciated. Thanks

---

<div class="post-metadata">

**Author:** ![sjabiulla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sjabiulla/32/48429_2.png) [@sjabiulla](https://discuss.elastic.co/u/sjabiulla)\
**Post date:** [July 2, 2019, 12:13pm UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/3 "2019-07-02T12:13:00Z")

</div>

Can you try adding the below in your date filter and see If it works fine ?

`timezone => "Africa/Abidjan"`

---

<div class="post-metadata">

**Author:** ![jmsrajkumar](https://avatars.discourse-cdn.com/v4/letter/j/ac8455/32.png) [@jmsrajkumar](https://discuss.elastic.co/u/jmsrajkumar)\
**Post date:** [July 2, 2019, 12:46pm UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/4 "2019-07-02T12:46:00Z")

</div>

I used ruby filter, it might help you

```auto
ruby {
        code => '
		t = Time.at(event.get("selling_date").to_f)
            event.set("selling_date", t.strftime("%Y-%m-%d %H:%M:%S"))
}

```

---

<div class="post-metadata">

**Author:** ![Pranay\_Garg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pranay_garg/32/49232_2.png) [@Pranay\_Garg](https://discuss.elastic.co/u/Pranay_Garg)\
**Post date:** [July 2, 2019, 2:10pm UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/5 "2019-07-02T14:10:19Z")

</div>

The issue was resolved using

```
timezone => "UTC"

```

Thanks for your help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 30, 2019, 2:17pm UTC](https://discuss.elastic.co/t/problem-parsing-date-field/188427/6 "2019-07-30T14:17:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.