Thanks for the reply badger,
So what exactly happened is that, we do have a logdate field which is canada time (EDT), but since we havent put the timezone, it automatically stored as UTC by default. So what if we have this scenario.
1st ingest (no timezone specified): timestamp= 2:44 AM
2nd ingest (with timezone specified): timestamp= 6:44 AM
take note the original timestamp is 2:44 AM.