# Kibana and @timestamp - out by 4 Months **URL:** \ **Category:** Kibana\ **Created:** [May 27, 2020, 11:23pm UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632 "2020-05-27T23:23:03Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![peterlarb](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@peterlarb](https://discuss.elastic.co/u/peterlarb)\ **Post date:** [May 27, 2020, 11:23pm UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/1 "2020-05-27T23:23:03Z")
I understand that Kibana uses UTC. Logstash imports a CSV and shows that @timestamp as 27 May 2020 for the file import. But my data in the rest of the index is showing Jan 2020 and not May 2020. Now I just can't work it out after so many hours of reading. I have also changed my default timezone to Sydney etc. Can anyone shed some light, please? Thank you Peter ![2020-05-27_21h34_17](https://us1.discourse-cdn.com/elastic/original/3X/e/3/e3c1249d80379a1dafc8f20f383ac3d8bcfabdc6.png) ---
**Author:** ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)\ **Post date:** [May 27, 2020, 11:41pm UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/2 "2020-05-27T23:41:57Z")
Hi @peterlarb It looks like the ingest timestamp and the index pattern time fields are different. Can you check how many 'date' fields you have in your index pattern? I suspect that the index pattern may either have a different date field set as its timestamp field or, possibly, that the date format for the time field in the index pattern might be incorrect. I'd also check your logstash config file to see if there are any filters or mutations that are running on ingest. One more thing I'd check is your elasticsearch index mapping for the date field being used as the default date field for the index pattern. In short: compare all the date fields you have and, if there is only one, make sure that the formats are all the same. One last thing that might be an issue is any ingest pipelines running in ES _after_ logstash has sent the docs to your es instance. For es: Queries to issue in the Kibana console (dev tools) (I'm using a sample data set here): `GET kibana_sample_data_flights/_mapping/field/timestamp` --\> should show date `GET _ingest/pipeline` --\> will give you all the ingest pipelines Then in Kibana, you can check your date field in the index pattern from the 'Management -\> Index Patterns' page (select the relevant index pattern). I hope this helps! ---
**Author:** ![peterlarb](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@peterlarb](https://discuss.elastic.co/u/peterlarb)\ **Post date:** [May 27, 2020, 11:46pm UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/3 "2020-05-27T23:46:35Z")
@cheiligers much appreciate your reply as I am new to ELK. Here is the Logstash parser for my csv. logstash for csv format filter { csv { separator =\> "," columns =\> ["message", "severity", "host", "datetime"] } date { match =\> ["datetime" , "DD/MM/YYYY HH:mm"] } } In regards to the Index pattern the @timestamp was set to Default. A sample date is: 27/05/2020 14:36 Cheers ---
**Author:** ![cheiligers](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheiligers/32/73114_2.png) [@cheiligers](https://discuss.elastic.co/u/cheiligers)\ **Post date:** [May 27, 2020, 11:57pm UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/4 "2020-05-27T23:57:58Z")
Your logstash config looks fine. It might be the @timestamp for your index pattern that's causing issues. Check what it's set to from the Management -\> Index Patterns page. You should also be able to change the format for that: ![Screen Shot 2020-05-27 at 16.57.33](https://us1.discourse-cdn.com/elastic/original/3X/c/c/cca27a3f65b2cab80999c719172669bcb35acc01.png) ---
**Author:** ![peterlarb](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@peterlarb](https://discuss.elastic.co/u/peterlarb)\ **Post date:** [May 28, 2020, 12:02am UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/5 "2020-05-28T00:02:55Z")
@cheiligers yep, I did that and it was set to default. ---
**Author:** ![peterlarb](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@peterlarb](https://discuss.elastic.co/u/peterlarb)\ **Post date:** [May 28, 2020, 3:17am UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/6 "2020-05-28T03:17:52Z")
@cheiligers it seems that the issue is ensuring that you have a lower case for DD. match =\> ["datetime" , "DD/MM/YYYY HH:mm"] should be: dd/MM/YYYY HH:mm Thank you for trying to help me. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 25, 2020, 3:17am UTC](https://discuss.elastic.co/t/kibana-and-timestamp-out-by-4-months/234632/7 "2020-06-25T03:17:53Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.