# @timestamp should match with aupm\_timestamp is not working for me

**URL:** https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311
**Category:** Logstash
**Created:** [April 13, 2016, 9:22pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311 "2016-04-13T21:22:01Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)
#### Post date: [April 13, 2016, 9:22pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/1 "2016-04-13T21:22:01Z")

</div>

error

---

<div class="post-metadata">

### Author: ![stecino](https://avatars.discourse-cdn.com/v4/letter/s/ea666f/32.png) [@stecino](https://discuss.elastic.co/u/stecino)
#### Post date: [April 13, 2016, 9:30pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/3 "2016-04-13T21:30:20Z")

</div>

I had similar issue to this, use the date filter, In your case it will something like this. I am not sure what date format you want to use. This will assign what you want to @timestamp, which is a metadata field value indicating when logstash processed the doc. If you don't specify the timezone it will default to UTC.

```
    date {
        match => ["aupm_timestamp", "MMM dd HH:mm:ss"]
        target => "@timestamp"

    }
```

---

<div class="post-metadata">

### Author: ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)
#### Post date: [April 13, 2016, 9:37pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/4 "2016-04-13T21:37:30Z")

</div>

FOR ME "yyyy-MM-dd HH:mm:ss,SSS" if i put the ,SSS its not even pulling the data to KIBANA

But my log formate is like that 2016-03-10 02:33:38,231

@stecino

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 13, 2016, 9:58pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/5 "2016-04-13T21:58:02Z")

</div>

Head over to [https://grokdebug.herokuapp.com](https://grokdebug.herokuapp.com) and try your pattern out, then you can move it back into the date filter when you know it works.

---

<div class="post-metadata">

### Author: ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)
#### Post date: [April 13, 2016, 11:08pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/7 "2016-04-13T23:08:58Z")

</div>

If i remove it ,SSS then ITS WORKING but i cannot see same date in KIBANA @warkolm @stecino

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 14, 2016, 3:55am UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/8 "2016-04-14T03:55:42Z")

</div>

The stack assumes UTC by default, so unless you provide a TZ then the data in KB will be altered to suit your browsers TZ.

---

<div class="post-metadata">

### Author: ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)
#### Post date: [April 14, 2016, 3:58am UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/9 "2016-04-14T03:58:17Z")

</div>

i'm sorry I'm new to this ELK. Can u say how to do that TZ

THANK YOU # I'm really in need can you help me out please  
@warkolm

---

<div class="post-metadata">

### Author: ![Vivek\_Raj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivek_raj/32/45342_2.png) [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)
#### Post date: [April 14, 2016, 3:24pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/10 "2016-04-14T15:24:49Z")

</div>

anyluck

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 14, 2016, 11:02pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/11 "2016-04-14T23:02:03Z")

</div>

TZ = time zone. Have a read of [https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-timezone](https://www.elastic.co/guide/en/logstash/current/plugins-filters-date.html#plugins-filters-date-timezone)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:02am UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311/12 "2017-07-06T05:02:09Z")

</div>


