# Time stamp is wrong **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-monitoring, elastic-stack-alerting\ **Created:** [October 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958 "2020-10-13T19:17:53Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/1 "2020-10-13T19:17:53Z")
**I have a problem with the time stamp I get the date right, but the time is wrong I get like 5 hours in advance, the date is right but I do not know why I get another time of execution, set the time zone in kibana, but I still get the time wrong.** **this is the watcher code...** { "trigger": { "schedule": { "interval": "1h" } }, "input": { "search": { "request": { "search\_type": "query\_then\_fetch", "indices": [ "agenteallot\*" ], "rest\_total\_hits\_as\_int": true, "body": { "size": 0, "query": { "bool": { "filter": { "range": { "@timestamp": { "gte": "{{ctx.trigger.scheduled\_time}}||-5m", "lte": "{{ctx.trigger.scheduled\_time}}", "format": "yyyy-MM-dd HH:mm:ss||basic\_time\_no\_millis" } } } } }, "aggs": { "bucketAgg": { "field": "monitor.name.keyword", "query": { "bool": { "must": { "match\_all": {} }, "filter": { "term": { "monitor.name.keyword": "01-2-CAV3000006278-DATOS-BKP-2.7G-99.98" } } } }, "aggs": { "metricAgg": { "max": { "field": "summary.up" } } } } } } } } }, "condition": { "script": { "source": "ArrayList arr = ctx.payload.aggregations.bucketAgg.buckets; for (int i = 0; i \< arr.length; i++) { if (arr[i]['metricAgg'].value \>= params.threshold) { return true; } } return false;", "lang": "painless", "params": { "threshold": 0.8 } } }, "actions": { "email\_1": { "email": { "profile": "standard", "attach\_data": { "format": "yaml" }, "to": [ "[juan.jaramillo@megadvantage.com](mailto:juan.jaramillo@megadvantage.com)", "[victor.vera@megadvantage.com](mailto:victor.vera@megadvantage.com)" ], "subject": "{{ctx.metadata.name}} {{ctx.payload.results}}", "body": { "text": """Buen dia, Adjunto registro del reporte. ⚠ALERTA NODO!!! El siguiente enlace perdió la conexión. Estado: Down🔴 Nombre del Enlace: {{ctx.payload.results}} 🕧Hora: {{ctx.execution\_time}} Área: Networking 🔔Mensaje Alerta: El enlace ha dejado de responder. Responder correo a [telecomunicaciones@udistrital.edu.co](mailto:telecomunicaciones@udistrital.edu.co) Ingrese aquí para más información: [https://72dfe17217744236af40cc31b704a664.us-central1.gcp.cloud.es.io:9243/s/distrital/app/uptime#](https://72dfe17217744236af40cc31b704a664.us-central1.gcp.cloud.es.io:9243/s/distrital/app/uptime#)""" } } } }, "transform": { "script": { "source": "HashMap result = new HashMap(); ArrayList arr = ctx.payload.aggregations.bucketAgg.buckets; ArrayList filteredHits = new ArrayList(); for (int i = 0; i \< arr.length; i++) { HashMap filteredHit = new HashMap(); filteredHit.key = arr[i].key; filteredHit.value = arr[i]['metricAgg'].value; if (filteredHit.value \>= params.threshold) { filteredHits.add(filteredHit); } } result.results = filteredHits; return result;", "lang": "painless", "params": { "threshold": 0.8 } } } } **here is the test when executing the alert the time of execution is wrong** ![Screenshot 2020-10-13 141452](https://us1.discourse-cdn.com/elastic/original/3X/0/5/05579f5844c31ba2fdb717fd82b3d239d81de950.png) **in this image you can see that you set the time zone in the kibana** ![Screenshot 2020-10-13 140733](https://us1.discourse-cdn.com/elastic/original/3X/8/c/8c650c1ec2ba3f96ac05dcdf25b6cf86f84cbf6e.png) I would be very grateful for your help!! ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [October 14, 2020, 12:26am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/2 "2020-10-14T00:26:11Z")
The timestamp is in UTC. 5 hours? I guess you are around India TZ? ---
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 14, 2020, 1:38am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/3 "2020-10-14T01:38:31Z")
No i'm in colombia ---
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 14, 2020, 1:39am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/4 "2020-10-14T01:39:43Z")
How can I change it to be right in my country? Please, I've been doing this for a long time. ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [October 14, 2020, 2:25am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/5 "2020-10-14T02:25:53Z")
ya, the other way around UTC-5 is Columbia TZ. Not sure what you are after. What's your condition? It is not working correctly? ---
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 14, 2020, 2:39am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/6 "2020-10-14T02:39:46Z")
It is like this.. `"@timestamp": { "gte": "{{ctx.trigger.scheduled_time}}||-5m", "lte": "{{ctx.trigger.scheduled_time}}", "format": "yyyy-MM-dd HH:mm:ss||basic_time_no_millis"` but I don't know why I get the time wrong if I'm supposed to get it from the browser. How could I fix it? please ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [October 14, 2020, 4:17am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/7 "2020-10-14T04:17:56Z")
You get it from elastic, not from the browser. Is your trigger not working correctly? ---
**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Post date:** [October 14, 2020, 7:53am UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/8 "2020-10-14T07:53:20Z")
Can you explain, why you picked a date format that does not allow to specify a timezone and milliseconds, but pass `ctx.trigger.scheduled_time` which looks like `2020-10-14T07:51:33.556943Z` and thus contains a timezone as well as microseconds? That might be one of the issues here and I amwondering, where the timestamp query part is coming from? ---
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 14, 2020, 1:10pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/9 "2020-10-14T13:10:56Z")
How do I solve it? ---
**Author:** ![Juan\_David\_Jaramillo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juan_david_jaramillo/32/76831_2.png) [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Post date:** [October 14, 2020, 1:12pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/10 "2020-10-14T13:12:42Z")
if it works but the time stamp is wrong and I don't know how to fix it ---
**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Post date:** [October 14, 2020, 10:14pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/11 "2020-10-14T22:14:28Z")
If it works, what do you care about the timestamp? This is coming from the server and it is in UTC timezone. As long as your logic is working correctly, and trigger is working as expected, dont worry. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 11, 2020, 10:14pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251958/12 "2020-11-11T22:14:31Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.