# Logstash Date Result in one day late **URL:** \ **Category:** Logstash\ **Created:** [October 7, 2016, 8:04am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465 "2016-10-07T08:04:10Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 7, 2016, 8:04am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/1 "2016-10-07T08:04:10Z")
my field "sdatetime" value is "2016 Aug 31 00:47:17Aug 31 00:47:17" I did the following date { match =\> ["sdatetime", "YYYY MMM dd HH:mm:ss"] target =\> "sdatetime2" } The result is "sdatetime2" =\> "2016-08-30T16:47:17.000Z" Why is the result 30 Aug instead of 31 Aug? I have tried applying the timezone but it does not work. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [October 7, 2016, 8:15am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/2 "2016-10-07T08:15:43Z")
What's the timezone of the timestamp in the `sdatetime` field? ---
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 7, 2016, 8:52am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/3 "2016-10-07T08:52:50Z")
Tried with no timezone specified and tried with timezone =\> "Asia/Hong\_Kong" in the date{} The result is the same ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [October 7, 2016, 8:58am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/4 "2016-10-07T08:58:27Z")
That's not what I asked. Anyway, the `@timestamp` field is always UTC and if you're in Hong Kong is appears to be doing the right thing. ---
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 7, 2016, 9:00am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/5 "2016-10-07T09:00:49Z")
below is my timestamp "@timestamp" =\> "2016-10-07T08:57:59.136Z", ---
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 7, 2016, 9:03am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/6 "2016-10-07T09:03:39Z")
> [@gringo](#): > > "sdatetime2" =\> "2016-08-30T16:47:17.000Z" How do I make "sdatetime2" =\> "2016-08-31T00:47:17.000Z" ---
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 7, 2016, 9:28am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/7 "2016-10-07T09:28:27Z")
I have tried putting an UCT setting date { timezone =\> "UCT" ............................................. } It works. What will happen if it is being sent to elastic search? Will be just as it is? or timezone will be silently added to mess up my data? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [October 7, 2016, 10:29am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/8 "2016-10-07T10:29:59Z")
Timestamps in Elasticsearch must be in UTC, so if you are in Hong Kong and the timestamps are in local time what you initially saw is the correct behaviour. Kibana and Elasticsearch assumes this is the case, so by setting it to something that is not UTC will cause problems. ---
**Author:** ![gringo](https://avatars.discourse-cdn.com/v4/letter/g/f19dbf/32.png) [@gringo](https://discuss.elastic.co/u/gringo)\ **Post date:** [October 10, 2016, 12:50am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/9 "2016-10-10T00:50:33Z")
My purpose of retaining the datetime as it is is because field in Elasticsearch is not time zone sensitive and need it to be in this time exactly. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [October 10, 2016, 5:37am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/10 "2016-10-10T05:37:48Z")
> field in Elasticsearch is not time zone sensitive What do you mean by this? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:34am UTC](https://discuss.elastic.co/t/logstash-date-result-in-one-day-late/62465/11 "2017-07-06T04:34:58Z")