# Kiban show wrong time **URL:** https://discuss.elastic.co/t/kiban-show-wrong-time/309193 **Category:** Kibana **Created:** [July 8, 2022, 10:35am UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193 "2022-07-08T10:35:49Z") **Posts on this page:** 6 **Page:** 1
### Author: ![anton.potekhin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anton.potekhin/32/108067_2.png) [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin) #### Post date: [July 8, 2022, 10:35am UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/1 "2022-07-08T10:35:49Z")
i have log messages in the following format: {"@timestamp":"2022-07-08T10:01:43.181Z","log.level":"info","message":"verifyReceipt: found receipt","ecs":{"version":"1.6.0"}} @timestamp in UTC. When i check logs in Kibana i see different time. I set in Kibana show logs time in UTC. Look at screenshots. You will see that time in logs "2022-07-08T08:42:21.327Z" but in Kibana i see time for this message: Jul 8. 2022 @ 08:42:26.207. It has offset about 5 sec. Why it happen ? Log: ![Screenshot 2022-07-08 at 13.31.38](https://us1.discourse-cdn.com/elastic/original/3X/9/b/9b5f71991ec92375aa20c51ef0f3674d71df2b4c.png) Kibana: ![Screenshot 2022-07-08 at 13.31.20](https://us1.discourse-cdn.com/elastic/original/3X/f/5/f5762d64e427ed70b46f4baa42671fd38e581d53.png) ---
### Author: ![hansc](https://avatars.discourse-cdn.com/v4/letter/h/a8b319/32.png) [@hansc](https://discuss.elastic.co/u/hansc) #### Post date: [July 8, 2022, 12:16pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/2 "2022-07-08T12:16:10Z")
Can they be different documents? Have you ever compared the `_id`? ---
### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp) #### Post date: [July 8, 2022, 1:23pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/3 "2022-07-08T13:23:32Z")
You need to provide more context on what is the source of this log and how you are ingesting it, but what you shared suggests that you are not using the `@timestamp` field of the source message as the `@timestamp` field in your elasticsearch document, this is done during the ingestion process. How are you ingesting those logs? Logstash? Filebeat? Ingest pipeline? ---
### Author: ![anton.potekhin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anton.potekhin/32/108067_2.png) [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin) #### Post date: [July 8, 2022, 2:53pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/4 "2022-07-08T14:53:08Z")
It is exact same lines. I checked it. ---
### Author: ![anton.potekhin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anton.potekhin/32/108067_2.png) [@anton.potekhin](https://discuss.elastic.co/u/anton.potekhin) #### Post date: [July 8, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/5 "2022-07-08T15:01:16Z")
Source of logs are text files. To ingesting used filebeat. Also i found line in log and document for this line in elastic. And document has different timestamp. Look at screenshots: ![Screenshot 2022-07-08 at 13.52.04](https://us1.discourse-cdn.com/elastic/original/3X/3/7/37f8f2a20e58d8059998a8ccd528a850ce959bbc.png) ![Screenshot 2022-07-08 at 13.54.09](https://us1.discourse-cdn.com/elastic/original/3X/3/f/3fe4c069e421b930b0fa644d86fede03d373ae57.png) ---
### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system) #### Post date: [August 5, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kiban-show-wrong-time/309193/6 "2022-08-05T15:01:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.