# Local timezone being assumed as UTC

**URL:** <https://discuss.elastic.co/t/local-timezone-being-assumed-as-utc/183437>\
**Category:** Logstash\
**Created:** [May 30, 2019, 12:04am UTC](https://discuss.elastic.co/t/local-timezone-being-assumed-as-utc/183437 "2019-05-30T00:04:56Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![krytie](https://avatars.discourse-cdn.com/v4/letter/k/c6cbf5/32.png) [@krytie](https://discuss.elastic.co/u/krytie)\
**Post date:** [May 30, 2019, 12:04am UTC](https://discuss.elastic.co/t/local-timezone-being-assumed-as-utc/183437/1 "2019-05-30T00:04:57Z")

</div>

Hello All,  
i have inherited a logstash/kibana install. i am a newbie to this product. and i have been asked to fix a few problems with it.

the biggest one is that our logs which are imported using filebeat are always 10 hours into the future. i believe this is because the raw log logs, which look like this

> 2019-05-30T00:21:38.340 Int 50052 007301CE-10067E55 3740 incall\_initiated 0:0

have no timezone included and are in local time GMT+10 and logstash assumes this is UTC. therefore in kibana we need to set the date range picker to 10 hours ahead of the current time to see recent logs.

the current filter looks like this

> filter {  
> grok {  
> match=\>[  
> "message","%{TIMESTAMP\_ISO8601:timestamp}%{SPACE}%{WORD:GVP\_LogLevel}%{SPACE}%{INT:GVP\_Component}%{SPACE}%{NOTSPACE:GVP\_CallID}%{SPACE}%{INT:GVP\_SEQ}%{SPACE}%{GREEDYDATA:GVP\_Log}"  
> ]  
> }  
> if "\_grokparsefailure" in [tags] {  
> drop { }  
> }  
> }

from searches of this forum and the internet in general, i think i need to add the following to the filter { }

> date{  
> match =\> ["timestamp","yyyy-MM-ddTHH:mm:ss.SSS"]  
> timezone =\> "Australia\Brisbane"  
> }

i'm not sure what i need to restart to parse the configuration file.  
I'm really hoping someone can let me know if im on the right track to fix this problem.  
Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 27, 2019, 12:16am UTC](https://discuss.elastic.co/t/local-timezone-being-assumed-as-utc/183437/2 "2019-06-27T00:16:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.