# Kibana timestamp in browser local time, but incoming logs UTC

**URL:** <https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501>\
**Category:** Kibana\
**Created:** [August 8, 2016, 4:23pm UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501 "2016-08-08T16:23:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![filebeat\_win](https://avatars.discourse-cdn.com/v4/letter/f/7ba0ec/32.png) [@filebeat\_win](https://discuss.elastic.co/u/filebeat_win)\
**Post date:** [August 8, 2016, 4:23pm UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501/1 "2016-08-08T16:23:39Z")

</div>

Hi There,

We have incoming IIS logs configured for UTC (currently 16:21 at the time of this writing). If I look at the logs in Kibana, since my browser is in PST (9:21 AM), it is showing the UTC logs from 9:21, not the recent ones at 16:21.

Here is the Grok filter:  
grok {  
match =\> ["message", "%{TIMESTAMP\_ISO8601:log\_timestamp} %{DATA:service-name} %{DATA:hostname} %{IPV4:site} %{DATA:method} %{URIPATH:page} %{NOTSPACE:querystring} %{INT:port} %{NOTSPACE:username} %{IPV4:clienthost} %{NOTSPACE:useragent} %{DATA:referer} %{INT:response} %{INT:subresponse} %{INT:scstatus} %{INT:bytes-s:int} %{INT:bytes-r:int} %{INT:response-ms:int}"]  
}  
date {  
match =\> ["log\_timestamp", "YYYY-MM-dd HH:mm:ss Z"]  
timezone =\> "Etc/UTC"  
}

I have added the timezone parameter, as well as tried appending "Z" to the timestamp match. However, Kibana continues to show logs hours prior because of the timezone mismatch.

I did see this report, but am unsure if there's a way to work around this:

> <https://github.com/elastic/kibana/issues/1600>

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [August 8, 2016, 5:00pm UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501/2 "2016-08-08T17:00:42Z")

</div>

Hi,

I think perhaps your data in Elasticsearch is OK and you just need to set the timezone to UTC in your Kibana Settings \> Advanced. The "dateFormat:tz" defaults to "browser". You should try changing that to "UTC".

Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:41pm UTC](https://discuss.elastic.co/t/kibana-timestamp-in-browser-local-time-but-incoming-logs-utc/57501/3 "2017-07-06T13:41:42Z")

</div>


