Timestamp for global target

Logstash events are independent from each other, only your first event has the date that you use as the @timestamp for the document, all the other events will get the auto-generated @timestamp from Logstash.

You need to treat your events as a multiline log, check my answer in your other post.