# Problem with indexing event their time in timestamp beginning with no zero

**URL:** <https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341>\
**Category:** Elasticsearch\
**Created:** [June 3, 2022, 2:07pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341 "2022-06-03T14:07:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ddoroshenko](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Post date:** [June 3, 2022, 2:07pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341/1 "2022-06-03T14:07:15Z")

</div>

Hi,

I have Oracle DB logs which have standard ISO8601 timestamp (yyyy-MM-ddTHH:mm:ss.SSSSSSZ).

I have date filter

```auto
filter {
  date {
    match => ["log_timestamp", "ISO8601"]
  }
}

```

But to the Elasticsearch are indexed only events between 00:00:00 and 09:59:59.  
It looks like Elasticsearch "don't understand" timestamps beginning with 1 or 2.

Note:

1. I have the problem with the only log. The other logs using the same date filter are indexed correctly.
2. There are not any errors in Logstash and Elasticsearch logs

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [June 6, 2022, 4:16am UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341/2 "2022-06-06T04:16:56Z")

</div>

Hi @ddoroshenko perhaps provide several samples of the complete timestamp you're trying to convert and what the results are.

---

<div class="post-metadata">

**Author:** ![ddoroshenko](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Post date:** [June 6, 2022, 6:23am UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341/3 "2022-06-06T06:23:49Z")

</div>

Here are.  
The `2022-06-05T05:46:21.358067+02:00` in log is converted to `2022-06-05T05:46:21.358` in Kibana

But something like `2022-06-05T15:46:21.358067+02:00` or `2022-06-05T23:46:21.358067+02:00` just dissappears and I don't see nothing in Kibana

---

<div class="post-metadata">

**Author:** ![ddoroshenko](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@ddoroshenko](https://discuss.elastic.co/u/ddoroshenko)\
**Post date:** [June 6, 2022, 12:46pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341/4 "2022-06-06T12:46:13Z")

</div>

Well,  
I had a tag collision in a pipeline so it cause the problem.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 4, 2022, 12:47pm UTC](https://discuss.elastic.co/t/problem-with-indexing-event-their-time-in-timestamp-beginning-with-no-zero/306341/5 "2022-07-04T12:47:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.