My hypothesis: it's a timezone issue.
2 questions:
- What's the value of
dateFormat:tz
in Kibana's Advanced Settings? - If it's "browser", what timezone is your local machine in? If it's not UTC, Kibana is doing timezone conversions for you, because all dates in ES are stored as UTC.
You should be able to confirm this by looking at the request Kibana is generating. Just pop open the spy tab on the visualization (the small arrow button in the bottom left hand corner) and click the request tab.