# Dealing with multiple timezones

**URL:** https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145
**Category:** Logstash
**Created:** [December 14, 2015, 4:41pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145 "2015-12-14T16:41:37Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![SuperBuster](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@SuperBuster](https://discuss.elastic.co/u/SuperBuster)
#### Post date: [December 14, 2015, 4:41pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/1 "2015-12-14T16:41:37Z")

</div>

Hi, i use the elk stack and i have machines in utc time, machines in pst time and some in eastern time. I wanted to know how you guys deal with this with your elk stack. (btw, i can't put everything in utc)

Even when i use the timezone option in the date filters, it doesn't look like it's working. Everything gets the 000 value

In Kibana everything is shown in the same timezone (utc).

ex:

date {  
match =\> ["syslog\_timestamp", "MMM dd HH:mm:ss", "MMM d HH:mm:ss", "MMM dd yyyy HH:mm:ss", "MMM d yyyy HH:mm:ss", "MMM d HH:mm:ss"]  
timezone =\> "America/Montreal"  
}

In Kibana, i'm based on the timestamp when searching for data.

Thanks for the help

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [December 14, 2015, 6:37pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/2 "2015-12-14T18:37:31Z")

</div>

> Even when i use the timezone option in the date filters, it doesn't look like it's working. Everything gets the 000 value

Huh? Do you mean the "000Z" that the timestamp string ends with? That just means that the millisecond part is zero and that the timestamp is in UTC. If that's not what you meant, please be more specific.

---

<div class="post-metadata">

### Author: ![SuperBuster](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@SuperBuster](https://discuss.elastic.co/u/SuperBuster)
#### Post date: [December 14, 2015, 7:24pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/3 "2015-12-14T19:24:50Z")

</div>

Yes, the timestamp is "@timestamp": "2015-12-14T18:40:01.000Z"

even with the specification of the timezone option:

timezone =\> "America/Montreal"

In fact, maybe i'm not understanding it well, but is specifying the timezone going to help when i search my data in Kibana?

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [December 14, 2015, 7:32pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/4 "2015-12-14T19:32:40Z")

</div>

The timestamp is always converted to UTC for storage in Elasticsearch, and if your timestamp don't contain a timezone offset you need to explicitly configure what timezone should be used for the conversion to UTC. The trailing "Z" indicates that it's UTC. Kibana will adjust the stored UTC timestamps to the browser's local time.

---

<div class="post-metadata">

### Author: ![SuperBuster](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@SuperBuster](https://discuss.elastic.co/u/SuperBuster)
#### Post date: [December 14, 2015, 7:34pm UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/5 "2015-12-14T19:34:24Z")

</div>

Thanks!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:18am UTC](https://discuss.elastic.co/t/dealing-with-multiple-timezones/37145/6 "2017-07-06T05:18:32Z")

</div>


