# Timestamp elasticsearch log missmatch with local timestamp

**URL:** <https://discuss.elastic.co/t/timestamp-elasticsearch-log-missmatch-with-local-timestamp/25473>\
**Category:** Elasticsearch\
**Created:** [July 13, 2015, 7:07pm UTC](https://discuss.elastic.co/t/timestamp-elasticsearch-log-missmatch-with-local-timestamp/25473 "2015-07-13T19:07:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![junior\_h](https://avatars.discourse-cdn.com/v4/letter/j/82dd89/32.png) [@junior\_h](https://discuss.elastic.co/u/junior_h)\
**Post date:** [July 13, 2015, 7:07pm UTC](https://discuss.elastic.co/t/timestamp-elasticsearch-log-missmatch-with-local-timestamp/25473/1 "2015-07-13T19:07:27Z")

</div>

Hi all,

I am tracing elasticsearch logs. But unfortunatelly, I find it difficult because there is difference timestamp in elasticsearch and localtime. My localtime is WIB (UTC+7), while elasticsearch log use EDT(UTC-4). I have other nodes with UTC timestamp in elasticsearch log.

I don't know how to match elasticsearch log time or modify the timestamp format. Here, the last line of log

```
# tail -n 1 /var/log/elasticsearch/QLWIMOAISD.log
[2015-07-13 14:23:16,201][INFO][indices.cache.filter] [node.0] updating [indices.cache.filter.size] from [10%] to [25%]

# ls -la /var/log/elasticsearch/QLWIMOAISD.log
-rw-r--r-- 1 elasticsearch elasticsearch 95699 Jul 14 01:23 /var/log/elasticsearch/QLWIMOAISD.log

# date
Tue Jul 14 01:29:52 WIB 2015

```

Please, your advice.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 13, 2015, 11:43pm UTC](https://discuss.elastic.co/t/timestamp-elasticsearch-log-missmatch-with-local-timestamp/25473/2 "2015-07-13T23:43:11Z")

</div>

This would be dependent on how your system is setup, as ES will just use the system time (which is usually UTC).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:01am UTC](https://discuss.elastic.co/t/timestamp-elasticsearch-log-missmatch-with-local-timestamp/25473/3 "2017-07-06T00:01:43Z")

</div>


