# Indexer failures-IllegalArgumentException

**URL:** https://community.graylog.org/t/indexer-failures-illegalargumentexception/340
**Category:** Graylog Central (peer support)
**Created:** [March 5, 2017, 9:22pm UTC](https://community.graylog.org/t/indexer-failures-illegalargumentexception/340 "2017-03-05T21:22:59Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![lubos](https://avatars.discourse-cdn.com/v4/letter/l/a8b319/32.png) [@lubos](https://community.graylog.org/u/lubos)
#### Post date: [March 5, 2017, 9:22pm UTC](https://community.graylog.org/t/indexer-failures-illegalargumentexception/340/1 "2017-03-05T21:22:59Z")

</div>

Hi All,  
we have this errors in Indexer failures:

```nohighlight
MapperParsingException[failed to parse [stime]]; nested: IllegalArgumentException[Invalid format: "03/Mar/2017:16:22:57 +0100" is malformed at "/Mar/2017:16:22:57 +0100"];
MapperParsingException[failed to parse [stime]]; nested: IllegalArgumentException[Invalid format: "03/Mar/2017:16:22:56 +0100" is malformed at "/Mar/2017:16:22:56 +0100"];
MapperParsingException[failed to parse [stime]]; nested: IllegalArgumentException[Invalid format: "Mar 3 16:22:56"];
MapperParsingException[failed to parse [stime]]; nested: IllegalArgumentException[Invalid format: "Mar 3 16:22:57"];

```

Is it possible to find source of these messages?  
could you give me some advice for this error?  
thanks

---

<div class="post-metadata">

### Author: ![derPhlipsi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/derphlipsi/32/38_2.png) [@derPhlipsi](https://community.graylog.org/u/derPhlipsi)
#### Post date: [March 5, 2017, 11:30pm UTC](https://community.graylog.org/t/indexer-failures-illegalargumentexception/340/2 "2017-03-05T23:30:24Z")

</div>

Hey @lubos,

sadly, there currently is no real way to find out in which Input an indexer fail occurred.  
I had this error some time ago. I’ll look up what I changed to fix it when I’m at work 🙂

Greetings - Phil

---

<div class="post-metadata">

### Author: ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)
#### Post date: [March 6, 2017, 8:36am UTC](https://community.graylog.org/t/indexer-failures-illegalargumentexception/340/3 "2017-03-06T08:36:03Z")

</div>

> [@lubos](#):
>
> could you give me some advice for this error?

Elasticsearch thinks that the `stime` field should be a valid date (because of the dynamic mapping if no custom mapping was provided).

Consider creating a custom index mapping for the `stime` field with the correct type: [http://docs.graylog.org/en/2.2/pages/configuration/elasticsearch.html#custom-index-mappings](http://docs.graylog.org/en/2.2/pages/configuration/elasticsearch.html#custom-index-mappings)