# Incorrect timestamp

**URL:** <https://discuss.elastic.co/t/incorrect-timestamp/62585>\
**Category:** Kibana\
**Created:** [October 9, 2016, 7:31pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585 "2016-10-09T19:31:29Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mormaii](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mormaii/32/10790_2.png) [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Post date:** [October 9, 2016, 7:31pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585/1 "2016-10-09T19:31:29Z")

</div>

I'm processing data with my logstash (which doesn't have any timestamp modifications or nothing related to it) and then feeding them to my elasticsearch and using Kibana to visualize the data. The problem is that since today all the date and time is incorrect. There hasn't been any configuration changes since yesterday so I have no clue what has happened.

Here's how it looks:

[http://puu.sh/rDhzE/c7259eca8f.png](http://puu.sh/rDhzE/c7259eca8f.png)

The flow looks like this:

Redis -\> Logstash -\> Elastic -\> Kibana

I've checked the date on all of our servers and no date is wrong so I don't understand where the wrong timestamp comes from

This is what the data looks like on my redis server:

> "RPUSH" "filebeat" "{"@timestamp":"2016-10-09T19:50:50.978Z","beat":{"hostname":"agslx-hpolevc01.agea.com.ar","name":"agslx-hpolevc01.agea.com.ar"},"count":1,"proc":{"cmdline":"pickup -l -t unix -u","cpu":{"user":20,"user\_p":0,"system":120,"total":140,"start\_time":"16:18"},"mem":{"size":93425664,"rss":3940352,"rss\_p":0,"share":2916352},"name":"pickup","pid":2197,"ppid":2102,"state":"sleeping","username":"postfix"},"type":"process"}"

> "RPUSH" "filebeat" "{"@timestamp":"2016-10-09T19:50:50.993Z","beat":{"hostname":"agslx-hpolevc01.agea.com.ar","name":"agslx-hpolevc01.agea.com.ar"},"count":1,"proc":{"cpu":{"user":0,"user\_p":0,"system":250150,"total":250150,"start\_time":"Apr23"},"mem":{"size":0,"rss":0,"rss\_p":0,"share":0},"name":"kworker/3:2H","pid":7068,"ppid":2,"state":"sleeping","username":"root"},"type":"process"}"

---

<div class="post-metadata">

**Author:** ![Mormaii](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mormaii/32/10790_2.png) [@Mormaii](https://discuss.elastic.co/u/Mormaii)\
**Post date:** [October 9, 2016, 8:51pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585/2 "2016-10-09T20:51:49Z")

</div>

Solved it, logstash was reading old data from the redis server

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [October 10, 2016, 7:59pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585/3 "2016-10-10T19:59:03Z")

</div>

Thanks for posting your solution!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:37pm UTC](https://discuss.elastic.co/t/incorrect-timestamp/62585/4 "2017-07-06T13:37:07Z")

</div>