# Daily index name and @timestamp value discrepancies

**URL:** <https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319>\
**Category:** Logstash\
**Created:** [March 2, 2016, 11:59pm UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319 "2016-03-02T23:59:43Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bruno\_Lavoie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_lavoie/32/8408_2.png) [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Post date:** [March 2, 2016, 11:59pm UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319/1 "2016-03-02T23:59:43Z")

</div>

Hello,

As many here, we use logstash to fill in data in ES and the output is a daily index with this format:  
index-name-%{+YYYY.MM.dd}

Yesterday (2016.03.01) , I saw a few a hours before midnight the next day index (today: 2016.03.02) appearing. But when viewing data in this new index, I saw data with the current day?

So, why the «March 1st 2016, 21:21» event is in the XXXXXX-2016.03.02 index?

Screenshot:  
[![](http://s14.postimg.org/lndvki469/2016_03_02_1855.png) ](http://s14.postimg.org/lndvki469/2016_03_02_1855.png)

Thanks  
Bruno Lavoie

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 3, 2016, 6:36am UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319/2 "2016-03-03T06:36:13Z")

</div>

The index names are based on UTC dates while the timestamp you see in Kibana by default it browser local time.

---

<div class="post-metadata">

**Author:** ![Bruno\_Lavoie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bruno_lavoie/32/8408_2.png) [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\
**Post date:** [March 3, 2016, 2:06pm UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319/3 "2016-03-03T14:06:14Z")

</div>

ha! so sorry I didn't thought of this detail.

So when we launch a query in Kibana, is he intelligent and use correctly date pattern accordingly?  
I think it's yes...

Thanks

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 3, 2016, 3:00pm UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319/4 "2016-03-03T15:00:59Z")

</div>

Yes, Kibana will of course do the right thing here.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:08am UTC](https://discuss.elastic.co/t/daily-index-name-and-timestamp-value-discrepancies/43319/5 "2017-07-06T05:08:28Z")

</div>