Could you please share an example , as with below using ES|QL i do not see any issue :
Queries
POST demo-timezone/_bulk
{"index":{}}
{"@timestamp": "2025-09-07T00:00:00Z", "message": "Midnight UTC"}
{"index":{}}
{"@timestamp": "2025-09-07T06:00:00Z", "message": "Morning UTC"}
{"index":{}}
{"@timestamp": "2025-09-07T12:00:00Z", "message": "Noon UTC"}
{"index":{}}
{"@timestamp": "2025-09-07T18:00:00Z", "message": "Evening UTC"}
{"index":{}}
{"@timestamp": "2025-09-07T23:59:59Z", "message": "End of Day UTC"}
While using ES|QL , i can see the date in local timezone & not UTC as shown in below screenshot :
FROM demo-timezone
| KEEP message, @timestamp
| SORT @timestamp ASC
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.