# Kibana Index time field does not match @timestamp field

**URL:** <https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922>\
**Category:** Logstash\
**Created:** [July 28, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922 "2020-07-28T14:44:16Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [July 28, 2020, 2:44pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922/1 "2020-07-28T14:44:16Z")

</div>

Hello,

Within my Kibana, I have an index showing @timestamp and another called " **time**".

The first issue is the field **@timestamp** does not match the time in Europe/London.  
The second is issue is that the **time** field in log does not match @timestamp

This is the json document of the index:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/4/2405a9bc25f566f6a4ec77bb9b5048f3865e588e.png)

I have tried to add both date filters in turn shown below to try and correct this but no luck.

```auto
date {
      match => ["time", "ISO8601"]
      timezone => "Europe/London"
      target => "time"
    }

```

Any one has come across this issue before? Thanks.

---

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [July 28, 2020, 3:39pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922/2 "2020-07-28T15:39:57Z")

</div>

Okay I have fixed the first issue with the incorrrect @timestamp by using the following config:

```auto
date {
      match => ["timestamp", "ISO8601"]
      timezone => "Europe/London"
    }

```

Now with the second issue where the @timestamp and log time were not matching, I tried the following:

```auto
grok {
      match => ["time", "%{TIMESTAMP_ISO8601:timestamp}"]
    }
    date {
      match => ["timestamp", "ISO8601"]
    }

```

This resolved the 2nd issue but this produced another index field called " **timestamp**"

---

<div class="post-metadata">

**Author:** ![Kevin\_f](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kevin_f/32/72456_2.png) [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\
**Post date:** [July 29, 2020, 8:20pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922/3 "2020-07-29T20:20:39Z")

</div>

Solved issue with:

```auto
    grok {
      match => ["time", "%{TIMESTAMP_ISO8601:timestamp}"]
    }
    date {
      match => ["timestamp", "ISO8601"]
      remove_field => ["timestamp"]
    }

```

hope this helps others in the future!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 26, 2020, 8:20pm UTC](https://discuss.elastic.co/t/kibana-index-time-field-does-not-match-timestamp-field/242922/4 "2020-08-26T20:20:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.