# Timestamp

**URL:** https://discuss.elastic.co/t/timestamp/274734
**Category:** Elasticsearch
**Created:** [June 2, 2021, 9:49am UTC](https://discuss.elastic.co/t/timestamp/274734 "2021-06-02T09:49:13Z")
**Posts on this page:** 14
**Page:** 1

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 2, 2021, 9:49am UTC](https://discuss.elastic.co/t/timestamp/274734/1 "2021-06-02T09:49:13Z")

</div>

Hello Expert,  
If i would like to insert old data for example last year data in ES, could I change the timestamp as date of last year? If No, then what is the solution to insert the data which correspondence the time?  
Thanks in advance

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 2, 2021, 9:53am UTC](https://discuss.elastic.co/t/timestamp/274734/2 "2021-06-02T09:53:01Z")

</div>

Elasticsearch will accept any timestamp you want, it doesn't need to be a current one.

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 2, 2021, 9:59am UTC](https://discuss.elastic.co/t/timestamp/274734/3 "2021-06-02T09:59:39Z")

</div>

but my old data dont have any timestamp... so can i able to put last year timestamp ?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 2, 2021, 10:00am UTC](https://discuss.elastic.co/t/timestamp/274734/4 "2021-06-02T10:00:50Z")

</div>

You can add it in, yes.

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 2, 2021, 10:02am UTC](https://discuss.elastic.co/t/timestamp/274734/5 "2021-06-02T10:02:26Z")

</div>

can you able to give an example how to fix timestamp in index.conf file ?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 2, 2021, 10:05am UTC](https://discuss.elastic.co/t/timestamp/274734/6 "2021-06-02T10:05:47Z")

</div>

I am not sure what you are referring to there.

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 2, 2021, 10:11am UTC](https://discuss.elastic.co/t/timestamp/274734/7 "2021-06-02T10:11:45Z")

</div>

I will give reference of last year date with date field... ?  
pls give me an example

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 2, 2021, 11:16pm UTC](https://discuss.elastic.co/t/timestamp/274734/8 "2021-06-02T23:16:01Z")

</div>

That depends on how to send the data to Elasticsearch

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 3, 2021, 7:23am UTC](https://discuss.elastic.co/t/timestamp/274734/9 "2021-06-03T07:23:36Z")

</div>

For example, If i would like to give timestamp of last month such as 11-05-2021, then how can i replace current timestamp into 11-05-2021....

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 3, 2021, 8:01am UTC](https://discuss.elastic.co/t/timestamp/274734/10 "2021-06-03T08:01:16Z")

</div>

```
`filter{
    csv{
    skip_empty_rows => "true"
    skip_header => "true"
    separator => ","
    columns => ["Job_ID", "Job_Type", "Client", "Client_Group", "Agent", "Instance", "Backup_Set", "Subclient", "Storage_Policy", "Job_Size(GB)", "SnapShot", "Backup_Date"]
    }
    mutate { gsub => ["message", ";;;;;;;;;;;\r", " "] }
    #mutate { gsub => ["message", ";", ","] }
    if [message] =~ /^,+$/ {drop { }}
    if ![message] {
            drop{ }
    }
    if [message] =~ /^([^,]*,){5}[^,]*$/ {
    drop {}
    }
    if [message] =~ /^([^,]*,){4}[^,]*$/ {
    drop {}
    }

    mutate {convert => ["Job_ID","integer"]}
    mutate {convert => ["Job_Size(GB)","float"]}
    #remove_field => ["message"]
    date {
            match => ["Backup_Date", "yyyy-MM-dd'T'HH:mm:ss'.'SSS'Z'"]
            timezone => "UCT"
            target => "@timestamp"
            }

```

Output but date parce failure and i want to fix Backup\_date into timestamp

{  
"@timestamp" =\> 2021-06-03T07:55:40.141Z,  
"Storage\_Policy" =\> "SP\_Bouge\_Chamballud\_BUR",  
"Agent" =\> "Windows 2003 32-bit File System",  
"Instance" =\> "N/A",  
"message" =\> "10740363,Backup,yoda,\_Client\_sur\_Cmmat-003; Angers; Bouge\_Chamballud; svp1-vcent-004; DBA\_serveur; Oracle; svp1-vcent-004-Bouge\_Chambalud; Reboot\_MA\_Hebdo; client FS,Windows 2003 32-bit File System,N/A,BS\_yoda\_FS,SC\_yoda\_FS,SP\_Bouge\_Chamballud\_BUR,238.41,No,2021/06/02;;;;;;; ",  
"Client\_Group" =\> "\_Client\_sur\_Cmmat-003; Angers; Bouge\_Chamballud; svp1-vcent-004; DBA\_serveur; Oracle; svp1-vcent-004-Bouge\_Chambalud; Reboot\_MA\_Hebdo; client FS",  
"Job\_Size(GB)" =\> 238.41,  
"Job\_ID" =\> 10740363,  
"Subclient" =\> "SC\_yoda\_FS",  
"SnapShot" =\> "No",  
"Client" =\> "yoda",  
"@version" =\> "1",  
"path" =\> "/etc/logstash/CSV/new/L.csv",  
"Backup\_Date" =\> "2021/06/02;;;;;;;;;;;;;;;;;;",  
"Job\_Type" =\> "Backup",  
"host" =\> "svp2-elasta-001.entreprise.corp",  
"Backup\_Set" =\> "BS\_yoda\_FS",  
"tags" =\> [  
[0] "\_dateparsefailure"  
]  
}`

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 3, 2021, 2:45pm UTC](https://discuss.elastic.co/t/timestamp/274734/11 "2021-06-03T14:45:21Z")

</div>

@warkolm  
` date {  
match =\> ["Backup\_Date","yyyy-MM-dd'T' HH:mm:ss.SSS:'Z'"]  
timezone =\> "UCT"  
target =\> "@timestamp"  
}

output

{  
"tags" =\> [  
[0] "\_dateparsefailure"  
],  
"@version" =\> "1",  
"@timestamp" =\> 2021-06-03T14:42:15.305Z,  
"Client" =\> "ZZZ\_svp1-spool-046",  
"Backup\_Date" =\> "2021-05-28 20:24:46",  
"Job\_Size(GB)" =\> 32.0  
}`

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 7, 2021, 1:21am UTC](https://discuss.elastic.co/t/timestamp/274734/12 "2021-06-07T01:21:19Z")

</div>

> [@Krunal](#):
>
> "Backup\_Date" =\> "2021/06/02;;;;;;;;;;;;;;;;;;",

That is not a valid date.

---

<div class="post-metadata">

### Author: ![Krunal](https://avatars.discourse-cdn.com/v4/letter/k/ce7236/32.png) [@Krunal](https://discuss.elastic.co/u/Krunal)
#### Post date: [June 7, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734/13 "2021-06-07T07:25:33Z")

</div>

Thank you @warkolm

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2021, 7:25am UTC](https://discuss.elastic.co/t/timestamp/274734/14 "2021-07-05T07:25:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
