# Timestamp format

**URL:** https://discuss.elastic.co/t/timestamp-format/19011
**Category:** Elasticsearch
**Created:** [July 31, 2014, 6:25pm UTC](https://discuss.elastic.co/t/timestamp-format/19011 "2014-07-31T18:25:47Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Cristian\_Falcas](https://avatars.discourse-cdn.com/v4/letter/c/e274bd/32.png) [@Cristian\_Falcas](https://discuss.elastic.co/u/Cristian_Falcas)
#### Post date: [July 31, 2014, 6:25pm UTC](https://discuss.elastic.co/t/timestamp-format/19011/1 "2014-07-31T18:25:47Z")

</div>

Hello all,

I'm using currently rsyslogd to send messages to elasticsearch and kibana  
as a GUI.

Rsyslogd is sending the @timestamp in the following format:

2014-07-31T21:01:16.515922+03:00

I was wondering if elasticsearch is able to understand this format? Because  
kibana sorting doesn't do anything with it. The sorting is completly random.

Should I send the timestamp in another format? Can I keep the microseconds?

Best regards,  
Cristian Falcas

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAMo7R\_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [August 4, 2014, 9:13am UTC](https://discuss.elastic.co/t/timestamp-format/19011/2 "2014-08-04T09:13:49Z")

</div>

Hey,

from the top of my head, joda (the underlying library used in Elasticsearch  
for date handling) only does millisecond and so does Elasticsearch. Maybe  
you can break down the micro to milliseconds and try again? Also, you might  
need to create your own date format, see

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

--Alex

On Thu, Jul 31, 2014 at 8:25 PM, Cristian Falcas [cristi.falcas@gmail.com](mailto:cristi.falcas@gmail.com)  
wrote:

> Hello all,
> 
> I'm using currently rsyslogd to send messages to elasticsearch and kibana  
> as a GUI.
> 
> Rsyslogd is sending the @timestamp in the following format:
> 
> 2014-07-31T21:01:16.515922+03:00
> 
> I was wondering if elasticsearch is able to understand this format?  
> Because kibana sorting doesn't do anything with it. The sorting is  
> completly random.
> 
> Should I send the timestamp in another format? Can I keep the microseconds?
> 
> Best regards,  
> Cristian Falcas
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/CAMo7R\_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com)  
> [https://groups.google.com/d/msgid/elasticsearch/CAMo7R\_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/CAMo7R_dKY%3DE-PyiKhc1SUtv5NKPM%3DAUJFyNmiwN-yuOigDEmQQ%40mail.gmail.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAGCwEM\_wdABki5HOajtfieFEvyr24XhFNMAJrtiXKZkgYm6VVw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAGCwEM_wdABki5HOajtfieFEvyr24XhFNMAJrtiXKZkgYm6VVw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:11am UTC](https://discuss.elastic.co/t/timestamp-format/19011/3 "2017-07-06T01:11:06Z")

</div>


