# \[SOLVED and THX\]"ISO8601" in date filter

**URL:** <https://discuss.elastic.co/t/solved-and-thx-iso8601-in-date-filter/24442>\
**Category:** Logstash\
**Created:** [June 26, 2015, 4:26pm UTC](https://discuss.elastic.co/t/solved-and-thx-iso8601-in-date-filter/24442 "2015-06-26T16:26:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![DavidL](https://avatars.discourse-cdn.com/v4/letter/d/ecc23a/32.png) [@DavidL](https://discuss.elastic.co/u/DavidL)\
**Post date:** [June 26, 2015, 4:26pm UTC](https://discuss.elastic.co/t/solved-and-thx-iso8601-in-date-filter/24442/1 "2015-06-26T16:26:01Z")

</div>

I am working with a log that have two individual fields for time and timezone offset (tab separated) like the following:

2014-12-14 23:59:40.227 -8

I was able to use mutate and add\_field to make them into one new field(timestamp) looking like this:

2014-12-14 23:59:40.227-0800 or this: 2014-12-14 23:59:40.227-08:00 or this: 2014-12-14 23:59:40.227-08,

and none of them was recognized by ISO8601 pattern in date filter, the assigned timestamp displayed eventually is

2014-12-15T07:59:40.227Z which is off by 8 hours, so my timezone offset was somehow never accepted, but the

time was. I've also tried to write my own Joda pattern: YYYY-MM-dd HH:mm:ssZZ which did not work either.

Anyone could tell me how I can adjust my timestamp field or Joda pattern to make date filter recognize it? Thank

you for the help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:36am UTC](https://discuss.elastic.co/t/solved-and-thx-iso8601-in-date-filter/24442/2 "2017-07-06T05:36:21Z")

</div>