# Changing logstash @timestamp timezone

**URL:** <https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711>\
**Category:** Logstash\
**Created:** [July 16, 2015, 9:56am UTC](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711 "2015-07-16T09:56:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Deb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/deb/32/46162_2.png) [@Deb](https://discuss.elastic.co/u/Deb)\
**Post date:** [July 16, 2015, 9:56am UTC](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711/1 "2015-07-16T09:56:54Z")

</div>

Hi,

I am new to logstash and playing around with it. I have a simple set-up in which I am forwarding logs using logstash-forwarder to logstash. Both logstash and logstash-forwarder are in the same machine.

My logstash config file is as below:-

```
input {
 lumberjack {
  port => 6782
  ssl_certificate => "/home/d/Documents/logstash/ssl_key/logstash-forwarder.crt"
  ssl_key => "/home/d/Documents/logstash/ssl_key/logstash-forwarder.key"
  type => "lumberjack"   
 }
}

filter {
  if [message] =~ /^\s*$/ {
        drop { }
  }  
}

output { 
 stdout { codec => rubydebug } 
}

```

My logststash-forwarder is like below:-

```
{
    "network": {
        "servers": ["localhost:6782"],
        "ssl ca": "/home/d/Documents/logstash/ssl_key/logstash-forwarder.crt",    
        "ssl key" : "/home/d/Documents/logstash/ssl_key/logstash-forwarder.key",
        "timeout": 15
    },
    "files": [
        {            
            "paths": ["-"],
            "fields": { 
                "type": "stdin",
                "app" : "test"
            }
        }
    ]
}

```

When I enter a simple `Hello` in the `logstash-forwarder` stdin.

```
Hello
2015/07/16 15:22:25.426913 Registrar: processing 1 events

```

I get the below output in logstash console:-

```
{
       "message" => "Hello",
      "@version" => "1",
    "@timestamp" => "2015-07-16T09:52:25.425Z",
          "type" => "stdin",
          "file" => "-",
          "host" => "d-1383",
        "offset" => "13",
           "app" => "test"
}

```

When I execute `date` in the machine in which the logstash and logstash-forwarder is installed it produces the below output

```
Thu Jul 16 15:22:46 IST 2015

```

Can someone let me know how can I make `@timestamp` equal to the same timezone in which the event was generated? How can I make logstash make use local timezone of the machine in which it is running?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 16, 2015, 10:13am UTC](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711/2 "2015-07-16T10:13:39Z")

</div>

The `@timestamp` field is UTC by definition. Display layers, like Kibana, should adjust this to local timezones where necessary.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:34am UTC](https://discuss.elastic.co/t/changing-logstash-timestamp-timezone/25711/3 "2017-07-06T05:34:31Z")

</div>