ElasticSeearch TimeZone - I appear with 4 hours

To add onto what @felixbarny said that timestamps for indexed document are stored in UTC (and everything in Elasticsearch are just documents in indexes) but if you navigate to the Discover app or the APM app (or pretty much any app in Kibana) the data will displayed in your local timezone but if you look at the raw document the timestamp will be in UTC, that is how Elasticsearch and Kibana work together.

1 Like