# Get log not in right time

**URL:** <https://discuss.elastic.co/t/get-log-not-in-right-time/287916>\
**Category:** Elasticsearch\
**Tags:** docker\
**Created:** [October 28, 2021, 1:01pm UTC](https://discuss.elastic.co/t/get-log-not-in-right-time/287916 "2021-10-28T13:01:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![quyennguyen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quyennguyen/32/91626_2.png) [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\
**Post date:** [October 28, 2021, 1:01pm UTC](https://discuss.elastic.co/t/get-log-not-in-right-time/287916/1 "2021-10-28T13:01:21Z")

</div>

I got log of Apache (access.log). But I never get it at the right time. Example like this pic.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3fcc3cf1dbb119618c64cdb9d600b78e9c105298.png)

The time in the Elastic with the time in Apache server I set up the same timezone. And Apache has log at that time too. Why didn't get the log at 19:43 but at 01:26?

And the log in different file didn't sort in the right time too.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/2/d28dc4899a0baa0dc2ec8f1e87f3b975de1bf5e9.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 29, 2021, 12:32am UTC](https://discuss.elastic.co/t/get-log-not-in-right-time/287916/2 "2021-10-29T00:32:38Z")

</div>

How are you ingesting the data into Elasticsearch?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2021, 12:33am UTC](https://discuss.elastic.co/t/get-log-not-in-right-time/287916/3 "2021-11-26T00:33:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
