# ELK stack - @timestamp issue

**URL:** https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620
**Category:** Logstash
**Created:** [July 10, 2020, 12:51am UTC](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620 "2020-07-10T00:51:50Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![jang](https://avatars.discourse-cdn.com/v4/letter/j/ecb155/32.png) [@jang](https://discuss.elastic.co/u/jang)
#### Post date: [July 10, 2020, 12:51am UTC](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620/1 "2020-07-10T00:51:50Z")

</div>

hello,

I am using Filebeat, Logstash, Elasticsearch, and Kibana.

I found a problem while checking the data through Kibana.

![image](https://us1.discourse-cdn.com/elastic/original/3X/2/8/281184cd325fd7945eabcc944f353cdfcbcdf7f1.png)

@timestamp data is 9hours slower than local time.

Of course, I know that i can change the time format through Kibana settings.

but, I'm using the date-form to create indexing from logstash to Elastic Search.  
But when I index data from Logstash to ElasticSearch, I'm using the index-name in a date format.

ex) my index-name  
testIndex-2020.07.02  
testIndex-2020.07.03  
testIndex-2020.07.02

I think I should change the time of the @timestamp and index it in an Elastic Search.

my logstash.conf)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/b/8bf53c99e4b452f5246e5466fefcbc2491a30eaa.png)

I thought of two ways.  
first,  
It is to change @timestamp in the filebeat.

Second,  
parsing @timestamp through filter in local-time in logstash.  
but, Parsing all @timestamp per log may seem unnecessary.  
I think the second would be to use up a lot of resources.

Please help me. How should I index the @timestamp date?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 12, 2020, 11:00pm UTC](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620/2 "2020-07-12T23:00:59Z")

</div>

Please don't post pictures of text, they are difficult to read, impossible to search and replicate (if it's code), and some people may not be even able to see them 🙂

`@timestamp` is treated as if it is UTC by Elasticsearch. You should use a `date` filter in Logstash to properly format it.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 9, 2020, 11:01pm UTC](https://discuss.elastic.co/t/elk-stack-timestamp-issue/240620/3 "2020-08-09T23:01:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.