Formatting @timestamp in Canvas

In ELK Stack 7.3 using Kibana and Canvas.
So the issue I discovered in formatting @timestamp into a date time.
This is the original message :

{"@timestamp":"2019-10-08T16:35:14.455Z","hostname":"MYHost2","ip":"","vm":"VM Desc 2","status":"UP","latency":"2ms"}

This is my Elastic Search output
"_index": "boris-topic",
"_type": "_doc",
"_id": "3wqosW0BN-pLbXvgd41G",
"_version": 1,
"_score": null,
"_source": {
"vm": "VM Desc 2",
"@timestamp": "2019-10-08T16:35:14.455Z",
"ip": "",
"status": "UP",
"hostname": "MYHost2",
"@version": "1",
"latency": "2ms"
"fields": {
"@timestamp": [
"sort": [

This is from Canvas:

| essql
query="SELECT "@timestamp" as time, hostname FROM "boris-topic*"
where hostname is not null"
| mapColumn time fn={ getCell time | formatdate format="dddd, MMMM Do YYYY, hh:mm:ss" }
| table paginate=true showHeader=true
| render

The original field had "@timestamp": [

This is in Kibana:

In Kibana the @timestamp is Oct 8, 2019 @ 12:35:14.455

The datetime on the canvas is wrong
Please help!

I believe you're running into a timezone issue, which is something being tracked here:

I understand that @timestamp is in UTC format. When I set the dateFormat:tz as UTC I would see same format in both Discover Table and JSON.

In Canvas I am not able to change format to my timezone. I tried many ways however I can only see the UTC format.

Is there a workaround for this time format issue?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.