# Time difference in kibana

**URL:** <https://discuss.elastic.co/t/time-difference-in-kibana/131217>\
**Category:** Kibana\
**Created:** [May 9, 2018, 6:46pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217 "2018-05-09T18:46:18Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 9, 2018, 6:46pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/1 "2018-05-09T18:46:18Z")

</div>

Hello,

I have 2 elastic search clusters serving 4 environment. 2 environments are hosted in PST and 2 environments are hosted in Sydney AU time zone.

3 of the environment are pointed to first cluster and 1 to a different cluster.

Somehow the environment that goes to the second cluster is having issues with showing the messages in kibana in the correct time.

 ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/8/b/8b34766b85c4269d7c6951580fe425fc18e9f5cf.PNG)

The logstash configuration is exactly the same and went over kibana settings and could not locate a problem.

If you can, Please let me know what is wrong in my setup, thank you

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [May 9, 2018, 8:16pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/2 "2018-05-09T20:16:13Z")

</div>

Hi,

By default Kibana chooses to display the data in the timezone detected by your browser. This setting is in advanced settings:

 ![00%20PM%20(2)](https://us1.discourse-cdn.com/elastic/original/3X/5/f/5fce299a1fd92ad599ac9b94be1b1056f4286ee9.png)

We also have this weird issue : [https://github.com/elastic/kibana/issues/17848](https://github.com/elastic/kibana/issues/17848)

So can you please check whats the local browser timezone and change if necessary and then see if it works?

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 9, 2018, 8:18pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/3 "2018-05-09T20:18:44Z")

</div>

Thank you for replying,

I am still having this weird issue after changing to UTC. Could it be connected to my logstash configuration?

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [May 9, 2018, 8:55pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/4 "2018-05-09T20:55:14Z")

</div>

Hi,

I am a bit confused. Does Kibana display the data from second cluster but in the wrong time zone or it shows nothing? Can you check if you have data in your second cluster? : [http://localhost:9200/\_cat/indices](http://localhost:9200/_cat/indices)

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 9, 2018, 8:57pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/5 "2018-05-09T20:57:52Z")

</div>

It shows all the logs but in a different timezone, in order to watch the recent logs, I need to search the future. I am in -8 TZ but my logs are coming from +10 TZ.

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [May 9, 2018, 9:29pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/6 "2018-05-09T21:29:04Z")

</div>

@thomasneirynck?

Thanks,  
Bhavya

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [May 10, 2018, 12:17am UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/7 "2018-05-10T00:17:14Z")

</div>

Can you check if your raw data is indexed correctly? If you do a \_search on that index (don't use Kibana-visualize, just use the dev-console or command line) in the 2nd cluster, what timezone is your data in?

Kibana-Visualize will end a timezone in the query. You can open the spy-panel and check the raw query that Kibana is sending for a visualization. Is the timezone correctly configured there?

---

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 11, 2018, 11:37pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/8 "2018-05-11T23:37:39Z")

</div>

My clusters are hosted with Elastic Search, can I reach the data you mentioned above in this case?

Thank you

---

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 14, 2018, 6:36pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/9 "2018-05-14T18:36:30Z")

</div>

A bit more context to this issue, the logstash hosts in Sydney are configured to use PDT timezone

logstash:~$ date  
Mon May 14 11:33:37 PDT 2018

In Kibana upload time is correct but @timestamp is 10 hours into the future.

},  
"prospector": {  
"type": "log"  
},  
"type": "iis",  
"Log": "{"Action":"open","Audit":"open-log-on-page","EventTimeUTC":"2018-05-14T18:28:44.9252558Z","UserName":"UnknownUser","Url":"/account/logon","UrlReferrer":""}",  
"source": "d:\logs\audits\Legacy-Portal\_2018-05-15\_audit.log",  
"@timestamp": "2018-05-15T04:28:44.925Z"  
},  
"fields": {  
"upload\_time": [  
"2018-05-14T18:28:45.241Z"  
],  
"@timestamp": [  
"2018-05-15T04:28:44.925Z"  
]  
},  
"sort": [  
1526358524925  
]  
}

* * *

Does this clear the picture?

---

<div class="post-metadata">

**Author:** ![Eran\_Mor](https://avatars.discourse-cdn.com/v4/letter/e/c57346/32.png) [@Eran\_Mor](https://discuss.elastic.co/u/Eran_Mor)\
**Post date:** [May 14, 2018, 8:07pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/10 "2018-05-14T20:07:19Z")

</div>

Checked all my settings but cannot find any reason why does my time chart under 'Discover' looks like the image I sent initially, any help will be appreciated.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 11, 2018, 8:07pm UTC](https://discuss.elastic.co/t/time-difference-in-kibana/131217/11 "2018-06-11T20:07:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
