# ElasticSearch indexing events from previous date into current date logstash-\* folder

**URL:** https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177
**Category:** Logstash
**Created:** [November 20, 2015, 6:14pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177 "2015-11-20T18:14:59Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![raghu\_ae](https://avatars.discourse-cdn.com/v4/letter/r/a88e4f/32.png) [@raghu\_ae](https://discuss.elastic.co/u/raghu_ae)
#### Post date: [November 20, 2015, 6:14pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/1 "2015-11-20T18:14:59Z")

</div>

Elastic search is indexing the events from November 19th 2015, 18:00:00.000 into logstash-2015.11.20.

Could you please let us know why events from previous date are getting indexed into current date?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 21, 2015, 5:55am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/2 "2015-11-21T05:55:33Z")

</div>

This is a Logstash problem, ES only indexes what is sent to it.

It'd help if you provided more information, versions, what your config looks like, etc.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 22, 2015, 9:18pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/3 "2015-11-22T21:18:18Z")

</div>

Keep in mind that Logstash goes by UTC. So when you're saying Nov 19 at 18:00, what timezone is that? If it's UTC-6 or anything west of that the data is going to be indexed in logstash-2015.11.20.

---

<div class="post-metadata">

### Author: ![raghu\_ae](https://avatars.discourse-cdn.com/v4/letter/r/a88e4f/32.png) [@raghu\_ae](https://discuss.elastic.co/u/raghu_ae)
#### Post date: [November 23, 2015, 10:11pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/4 "2015-11-23T22:11:02Z")

</div>

I am using CST timezone.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 24, 2015, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/5 "2015-11-24T06:39:44Z")

</div>

I assume you mean Central Standard time (UTC-6) rather than China Standard Time. In that case what you're seeing is the expected behavior.

---

<div class="post-metadata">

### Author: ![raghu\_ae](https://avatars.discourse-cdn.com/v4/letter/r/a88e4f/32.png) [@raghu\_ae](https://discuss.elastic.co/u/raghu_ae)
#### Post date: [November 24, 2015, 8:08pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/6 "2015-11-24T20:08:31Z")

</div>

Yes, that's correct. And also [How to set @timestamp timezone?](https://discuss.elastic.co/t/how-to-set-timestamp-timezone/28401) gave me some more information.

Thank you :)😄

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:21am UTC](https://discuss.elastic.co/t/elasticsearch-indexing-events-from-previous-date-into-current-date-logstash-folder/35177/7 "2017-07-06T05:21:26Z")

</div>


