# Kibana showing incorrect timestamp

**URL:** <https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619>\
**Category:** Kibana\
**Created:** [October 13, 2021, 11:50am UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619 "2021-10-13T11:50:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sn4cK](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sn4ck/32/82737_2.png) [@Sn4cK](https://discuss.elastic.co/u/Sn4cK)\
**Post date:** [October 13, 2021, 11:50am UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619/1 "2021-10-13T11:50:12Z")

</div>

Hello,

I am having issue with how Kibana shows timestamps of my documents indexed in Elasticsearch.

I have a document looking like:

```auto
{ 
 "_index": "speedtest",
  "_type": "_doc",
  "_id": "1-nldXwBFYKxSrUSopKs",
  "_version": 1,
  "_score": 1,
  "_source": {
    "timestamp": "2021-10-12T21:05:55.825681",
    "upSpeed": 24.8,
    "downSpeed": 108
  },
  "fields": {
    "upSpeed": [
      24.8
    ],
    "downSpeed": [
      108
    ],
    "timestamp": [
      "2021-10-12T21:05:55.825Z"
    ]
  }
}

```

But kibana always shows time with +2 hours (Oct 12, 2021 @ 23:05:55.825). So whenever I use the quick time filters like last 15 minutes it shows 2hours old data.  
I have set tried seting the dateFormat:tz to Europe/Prague which shows it with +2 hours. When I change it to GMT+0 it shows the time correctly but the quick filters still don't work.

I am using Kibana 7.15 and Elasticsearch 7.15  
Tried it on earlier 7.12 too and had the same behaviour

Is there something I am missing?

---

<div class="post-metadata">

**Author:** ![Mustafa\_NAJIB](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mustafa_najib/32/95797_2.png) [@Mustafa\_NAJIB](https://discuss.elastic.co/u/Mustafa_NAJIB)\
**Post date:** [October 13, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619/2 "2021-10-13T13:22:07Z")

</div>

Hello,  
When creating an index you must pay attention to the time field that you choose in the 2nd step you must choose the logdate, not the indexing time.

i have done a test with this log line in case you have to change only the timezone :

```auto
**2021-10-12T21:05:55.825681|aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa**

```

Filter :

```auto
filter {
  
    grok {
      match => {
        "message" => [
          "^%{TIMESTAMP_ISO8601:logdate}\|%{GREEDYDATA}",
          "%{GREEDYDATA:FAILPARSE}"
        ]
      }
    }
   
   date {
      match => ["logdate", "ISO8601", "yyyy-MM-dd HH:mm:ss.SSSSSS"]
      timezone => "GMT"
      target => "TIMESTAMP"
    }
  }

```

**OUTPUT :**

```auto
{
  "TIMESTAMP": "2021-10-12T21:05:55.825Z",
  "logdate": "2021-10-12T21:05:55.825681",
  "message": "2021-10-12T21:05:55.825681|aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619/3 "2021-11-10T13:22:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.