@timestamp and _index question


(張皓翔) #1

Hi everyone,
I store syslog into elasticsearch and overview data on Kibana.
I found that the date of @timestamp and _index doesn't match.
The _index is default logstash-* and it seems would automatically adjust from @timestamp.
my doubt is that whether the _index is using UTC, and how to solve it.
this one looks doesn't match:
image
following data is match:
image

thank you in advance : )


(Mark Walkom) #2

Timestamps in Kibana are translated into the browsers timezone, so what zone are you in?


(張皓翔) #3

I am in GMT+8


(Mark Walkom) #4

That that looks right.

The first timestamp minus 8 hours would mean the 24th.


(張皓翔) #5

could I change the _index to my timezone?


(Mark Walkom) #6

Elasticsearch and Logstash use UTC anyway, so it won't do anything.


(張皓翔) #7

OK, thanks for your reply : )


(system) #8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.