# Mismatch date data on Kibana

**URL:** <https://discuss.elastic.co/t/mismatch-date-data-on-kibana/235246>\
**Category:** Kibana\
**Created:** [June 1, 2020, 11:10pm UTC](https://discuss.elastic.co/t/mismatch-date-data-on-kibana/235246 "2020-06-01T23:10:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sirius](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sirius/32/47012_2.png) [@Sirius](https://discuss.elastic.co/u/Sirius)\
**Post date:** [June 1, 2020, 11:10pm UTC](https://discuss.elastic.co/t/mismatch-date-data-on-kibana/235246/1 "2020-06-01T23:10:14Z")

</div>

Hello All,

I'm shipping data logs from filebeat to ELK v 7.6.2. The time filter refresh field used in my index pattern is the default @timestamp with timezone configured in Kibana as Mexico/General. The mapping set for the date field shipped is:

" **ApiTimeStamp**": {  
"type": "date",  
"format": " **strict\_date\_optional\_time**"  
}

ApiTimeStamp data log example : 2020-06-01T **04** :02:22.679Z  
ApiTimeStamp data log on Kibana : May 31, 2020 @ **23** :02:22.679  
@timestamp: Jun 1, 2020 @ **16** :02:29.880

For some reason all date data shipped are being subtracted minus few hrs against @timestamp. Anyway, what I'm looking for is just get the original date value from log, any suggestion to achieve it ?

Thanks & Regards,  
Jorge

---

<div class="post-metadata">

**Author:** ![Sirius](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sirius/32/47012_2.png) [@Sirius](https://discuss.elastic.co/u/Sirius)\
**Post date:** [June 5, 2020, 2:44am UTC](https://discuss.elastic.co/t/mismatch-date-data-on-kibana/235246/2 "2020-06-05T02:44:19Z")

</div>

Resolved on this topic:

> [@How to keep original date data from json as source to ES](https://discuss.elastic.co/t/how-to-keep-original-date-data-from-json-as-source-to-es/235436):
>
> Hello, I'm shipping json data logs with filebeat to ELK 7.6 version. For some reason date data are substracted by hours when is ingested in ES,, how can I keep original source dates in ES without be modified ? FIlebeat configuration is: filebeat.inputs: json: keys\_under\_root: true add\_error\_key: true overwrite\_key: true processors: decode\_json\_fields: fields: ["message"] max\_depth: 2 target: "" Filebeat output is sending to logstash. Logstash has not any special configuration just …

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 3, 2020, 2:44am UTC](https://discuss.elastic.co/t/mismatch-date-data-on-kibana/235246/3 "2020-07-03T02:44:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.