# Curl to elasticsearch ELK cluster doesn't bring back current data whereas Kibana does

**URL:** <https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782>\
**Category:** Logstash\
**Created:** [February 25, 2016, 9:47pm UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782 "2016-02-25T21:47:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stuart\_Cracraft1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stuart_cracraft1/32/8036_2.png) [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\
**Post date:** [February 25, 2016, 9:47pm UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782/1 "2016-02-25T21:47:43Z")

</div>

On Kibana, I see all current data all the time.

But when I do a

curl -XGET '[http://elkcluster:9200/logstash-YYYY.MM.DD/\_search?host=somehost&type=heartbeat](http://elkcluster:9200/logstash-YYYY.MM.DD/_search?host=somehost&type=heartbeat)'

it shows me out of date logstash heartbeats.

I go back to Kibana and everything is uptodate with respect to heartbeats and all other data from the host to ELK.

Why is curl out-of-date?

The logstash shipper log on the "some host" shows current heartbeats being sent with current timestamps a minute apart going back from wall clock time.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 26, 2016, 1:50am UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782/2 "2016-02-26T01:50:00Z")

</div>

All timestamps in Elasticsearch are stored in UTC timezone, and time based index patterns are also based on UTC. Kibana is however able to adjust for your local timezone, which could explain the difference. Which timezone are you in?

---

<div class="post-metadata">

**Author:** ![Stuart\_Cracraft1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stuart_cracraft1/32/8036_2.png) [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\
**Post date:** [February 26, 2016, 2:06am UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782/3 "2016-02-26T02:06:04Z")

</div>

Systems are all UTC.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [February 26, 2016, 8:31am UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782/4 "2016-02-26T08:31:55Z")

</div>

Can you show an example of an out of date logstash record?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:09am UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782/5 "2017-07-06T05:09:39Z")

</div>