title: Parsing timestamp using date format in logstash
body: <p>I'm working on parsing the timestamp from couchdb log. The entire timestamp is getting processed correctly when seen in stdout, however _grokparsefailure is observed when viewing with Kibana on top of elasticsearch.</p>
  
  <p>Ex logline : </p>
  
  <pre><code>[Thu, 31 Jul 2014 17:14:28 GMT] [info] [&lt;0.23047.647&gt;] 10.30.50.48 - - HEAD /z_775-797_api_docs 200
  </code></pre>
  
  <p>i've followed these links in parsing the date format : <a href="http://logstash.net/docs/1.4.2/filters/date" rel="nofollow">http://logstash.net/docs/1.4.2/filters/date</a> , <a href="http://joda-time.sourceforge.net/apidocs/org/joda/time/format/DateTimeFormat.html" rel="nofollow">http://joda-time.sourceforge.net/apidocs/org/joda/time/format/DateTimeFormat.html</a></p>
  
  <p>my parse code is  : </p>
  
  <pre><code>grok{
        match =&gt; { "message" =&gt; "%{SYSLOG5424SD:Log_Time} \[info] %{SYSLOG5424SD:response_time} %{IPV4:ip_address} - - %{WORD:http_method} %{URIPATH} %{INT:file_value}" }
  }
  
  date{
  match =&gt; ["Log_Time","[EEE, dd MMM YYYY HH:mm:ss zzz]"]
  }
  </code></pre>
  
  <p>My output code is :</p>
  
  <pre><code>output {
    elasticsearch { host =&gt; localhost }
    stdout { codec =&gt; json }
  }
  </code></pre>
  
  <p>where Log_Time = <code>[Thu, 31 Jul 2014 17:14:28 GMT]</code> and the output timestamp is 
  <code>"@timestamp":"2014-07-31T17:14:28.000Z"</code></p>
  
  <p>The data displayed under stdout is "@timestamp":"2014-07-31T17:14:28.000Z" without any grok parse error but in Kibana the time of parsing is coming as timestamp and the _grokparseerror tag is present. I couldn't understand why there is this difference between standard out and Kibana. I tried deleting all elasticsearch indexes and the .sincedb files but still the errors remain.</p>
  
  <p>Please help if you have any ideas</p>