# Timestamp problem

**URL:** <https://community.graylog.org/t/timestamp-problem/1127>\
**Category:** Graylog Central (peer support)\
**Created:** [May 12, 2017, 7:31am UTC](https://community.graylog.org/t/timestamp-problem/1127 "2017-05-12T07:31:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jtkarvo](https://avatars.discourse-cdn.com/v4/letter/j/43a26b/32.png) [@jtkarvo](https://community.graylog.org/u/jtkarvo)\
**Post date:** [May 12, 2017, 7:31am UTC](https://community.graylog.org/t/timestamp-problem/1127/1 "2017-05-12T07:31:55Z")

</div>

hi,

I have a weird problem that occurs often. (Graylog 2.2.3) It has indexing errors:

My guess the problem is this:

> “timestamp”:“2017-05-09 00:00:00.000”

I don’t understand why this happens, as I use an extractor:

```
> {
> "title": "timestamp ext",
> "extractor_type": "split_and_index",
> "converters": [
> {
> "type": "date",
> "config": {
> "date_format": "yyyy-MM-dd'T'HH:mm:ssZ"
> }
> }
> ],
> "order": 0,
> "cursor_strategy": "copy",
> "source_field": "message",
> "target_field": "timestamp",
> "extractor_config": {
> "index": 1,
> "split_by": "|"
> },
> "condition_type": "none",
> "condition_value": ""
> }

```

and the test message is as follows:

```
2017-05-09T00:00:00Z|public|

```

Now: the original line does not have a space between date and time. If I use the same extractor without the date converter, the same happens. Also, if I change to flexible date converter, this happens. I can easily change the date format in the logline that is sent, but I thought this format was the right one. Also, if I add milliseconds to the date format, the same seems to happen.

The input is raw TCP input.

---

<div class="post-metadata">

**Author:** ![jtkarvo](https://avatars.discourse-cdn.com/v4/letter/j/43a26b/32.png) [@jtkarvo](https://community.graylog.org/u/jtkarvo)\
**Post date:** [May 12, 2017, 7:52am UTC](https://community.graylog.org/t/timestamp-problem/1127/2 "2017-05-12T07:52:41Z")

</div>

Please ignore. Writing the problem down helped thinking, but eventually the problem was elsewhere and my fault.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 26, 2017, 7:58am UTC](https://community.graylog.org/t/timestamp-problem/1127/3 "2017-05-26T07:58:38Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.