# Log data entered wrong index

**URL:** <https://discuss.elastic.co/t/log-data-entered-wrong-index/148748>\
**Category:** Logstash\
**Created:** [September 17, 2018, 12:37am UTC](https://discuss.elastic.co/t/log-data-entered-wrong-index/148748 "2018-09-17T00:37:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wonki](https://avatars.discourse-cdn.com/v4/letter/w/aeb1de/32.png) [@wonki](https://discuss.elastic.co/u/wonki)\
**Post date:** [September 17, 2018, 12:37am UTC](https://discuss.elastic.co/t/log-data-entered-wrong-index/148748/1 "2018-09-17T00:37:42Z")

</div>

Hi everyone!

2018-09-17 08:59:59.501 \<- this is my log time  
and i set my logstash elasticsearch output plugin

elasticsearch{  
host =\> ["127.0.0.1:9200"]  
index =\> "log-%{+YYYY.MM.dd}"  
}

So as expected, my log is included 2018.09.17 index but now it is included in 2018.09.16 index.  
And 2018-09-17 09:01:01.111 time log included 2018.09.17 index normally.  
I think it has something to do with timezone setting ( my server in korea UTD + 9 hour ) but i can't figure out what should i do.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 17, 2018, 6:36am UTC](https://discuss.elastic.co/t/log-data-entered-wrong-index/148748/2 "2018-09-17T06:36:53Z")

</div>

The timestamp used in the index name is based on the `@timestamp` field which is always UTC. This is not configurable.

---

<div class="post-metadata">

**Author:** ![wonki](https://avatars.discourse-cdn.com/v4/letter/w/aeb1de/32.png) [@wonki](https://discuss.elastic.co/u/wonki)\
**Post date:** [September 17, 2018, 10:08am UTC](https://discuss.elastic.co/t/log-data-entered-wrong-index/148748/3 "2018-09-17T10:08:26Z")

</div>

Thanks, magnusbaeck. I would change my server time from kr to utc. Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 15, 2018, 10:08am UTC](https://discuss.elastic.co/t/log-data-entered-wrong-index/148748/4 "2018-10-15T10:08:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.