# Timezone issue

**URL:** https://discuss.elastic.co/t/timezone-issue/171630
**Category:** Beats
**Tags:** filebeat
**Created:** [March 10, 2019, 3:09pm UTC](https://discuss.elastic.co/t/timezone-issue/171630 "2019-03-10T15:09:53Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![adwaitjoshi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adwaitjoshi/32/35098_2.png) [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)
#### Post date: [March 10, 2019, 3:09pm UTC](https://discuss.elastic.co/t/timezone-issue/171630/1 "2019-03-10T15:09:53Z")

</div>

I have metricbeat and filebeat enabled for both system and kafka. MetricBeat seems to be sending the right data and the time is shown correct EDT. However FileBeat seems to be sending a time 4 hours behind EDT. I have confirmed that the convert\_timezone is set to false everywhere.

---

<div class="post-metadata">

### Author: ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [March 11, 2019, 2:29pm UTC](https://discuss.elastic.co/t/timezone-issue/171630/2 "2019-03-11T14:29:09Z")

</div>

Both Metricbeat and Filebeat convert the time to UTC when publishing events. Always. If a module has `convert_timezone` enabled, then filebeat will add the locale information and configure the ingest pipeline in Elasticsearch to convert the timestamp according to the locale later.  
As filebeat itself does not parse the logs, the timestamp shipped with raw filebeat modules is the time a log line was read.

---

<div class="post-metadata">

### Author: ![adwaitjoshi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adwaitjoshi/32/35098_2.png) [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)
#### Post date: [March 25, 2019, 9:52am UTC](https://discuss.elastic.co/t/timezone-issue/171630/3 "2019-03-25T09:52:21Z")

</div>

I am also having this issue with just elastic as a store. If I send data from my application to Elastic it assumes that the timestamp is GMT. How do I force EST? Add a timezone variable to my timestamp when I send it?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 22, 2019, 9:52am UTC](https://discuss.elastic.co/t/timezone-issue/171630/4 "2019-04-22T09:52:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
