# "UNIX\_MS" Syntax in Date Plugin
**URL:** https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840
**Category:** Logstash
**Created:** [September 6, 2016, 1:53am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840 "2016-09-06T01:53:45Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@gringo](https://discuss.elastic.co/u/gringo)
#### Post date: [September 6, 2016, 1:53am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/1 "2016-09-06T01:53:45Z")
How should I use the "UNIX\_MS" Syntax in Date Plugin? Below is what I've tried and it does not work. I cannot find any examples of this online.
```
date
{
match => ["my_field", "MMM dd YYY HH:mm:ss", "MMM d YYY HH:mm:ss", "ISO8601", "UNIX_MS"]
}
```
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 6, 2016, 3:33am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/2 "2016-09-06T03:33:57Z")
What's the contents of `my_field`? What's the current result from the filter? What was your expectation?
---
### Author:  [@gringo](https://discuss.elastic.co/u/gringo)
#### Post date: [September 6, 2016, 7:47am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/3 "2016-09-06T07:47:44Z")
part of my log has "my\_field=1366125127000"
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 6, 2016, 8:54am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/4 "2016-09-06T08:54:10Z")
Sure, but do you actually have a _field_ named `my_field`? Please show the output of a `stdout { codec => rubydebug }` plugin.
---
### Author:  [@gringo](https://discuss.elastic.co/u/gringo)
#### Post date: [September 7, 2016, 1:03am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/5 "2016-09-07T01:03:41Z")
Output of stdout { codec =\> rubydebug } has the following.
"my\_field" =\> "1366125117000\r",
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [September 7, 2016, 6:11am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/6 "2016-09-07T06:11:07Z")
The trailing carriage return character might be the problem. Try using the mutate filter's strip option to remove it so that `my_field` just contains the timestamp integer.
---
### Author:  [@gringo](https://discuss.elastic.co/u/gringo)
#### Post date: [September 13, 2016, 1:02am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/7 "2016-09-13T01:02:18Z")
the "\r" is the problem.
problem solved
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:38am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840/8 "2017-07-06T04:38:51Z")