# ELK has changed my EventTime

**URL:** https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858
**Category:** Elasticsearch
**Created:** [May 24, 2016, 3:07pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858 "2016-05-24T15:07:00Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![Juan\_Andres\_Ramirez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_andres_ramirez/32/9467_2.png) [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 24, 2016, 3:07pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/1 "2016-05-24T15:07:00Z")

</div>

Hello Guys,  
I was finding about in what Timezone ELK saved the data. I had read ELK saved the data for default in UTC.  
I didn't find how to change the timezone in ELK config.

The output from client:

```
"date":"2016-05-24","time":"10:24:21","EventTime":"2016-05-24T10:24:21Z"

```

The output from Logstash:

```
"date":"2016-05-24","time":"10:24:21","EventTime":"2016-05-24T10:24:21Z"

```

But I saw the same data in ELK:

```
EventTime = May 24th 2016, 06:24:21.000
Time= 10:24:21

```

The field eventTime is created from field $date and $time got from data.

Anyway to set the timezone in ELK in EDT?.

Thank you.

---

<div class="post-metadata">

### Author: ![Juan\_Andres\_Ramirez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_andres_ramirez/32/9467_2.png) [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 24, 2016, 4:14pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/2 "2016-05-24T16:14:35Z")

</div>

I saw, this problem will fixed if I use time-zone in the java block.

I don't know if its is the right way.

Anyone know?.

Thank you.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 24, 2016, 9:42pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/3 "2016-05-24T21:42:50Z")

</div>

ES only deals in UTC and that is what LS assumes it receives.  
If your timestamps are localised, set things with the date filter.

---

<div class="post-metadata">

### Author: ![Juan\_Andres\_Ramirez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_andres_ramirez/32/9467_2.png) [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)
#### Post date: [May 26, 2016, 3:33pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/4 "2016-05-26T15:33:49Z")

</div>

Hello Warkolm  
Understood, I resolved my problem added to logs the time in UTC. Isn't the best way but is work.

Thank you.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 26, 2016, 9:20pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/5 "2016-05-26T21:20:32Z")

</div>

> [@Juan\_Andres\_Ramirez](#):
>
> Isn't the best way

Yes, it is. It's an actual standard and the rest of the stack knows how to deal with it.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 10:48pm UTC](https://discuss.elastic.co/t/elk-has-changed-my-eventtime/50858/6 "2017-07-05T22:48:45Z")

</div>