# Very old events are published in Elastic Search

**URL:** <https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522>\
**Category:** Elasticsearch\
**Created:** [April 25, 2019, 6:44pm UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522 "2019-04-25T18:44:43Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jaepyoung\_Kim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaepyoung_kim/32/44175_2.png) [@Jaepyoung\_Kim](https://discuss.elastic.co/u/Jaepyoung_Kim)\
**Post date:** [April 25, 2019, 6:44pm UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/1 "2019-04-25T18:44:43Z")

</div>

When I checked logs kibana today, log events at 4/12 is being published now.  
For example,  
|@timestamp| |April 25th 2019, 11:15:15.213|  
| offset |1,395,503,642  
|raw\_message| |####\<2019/04/12 17:39:25.555 +0200\> \<fr2prd\_a\> \<2289\>

My company is using log rotator and we change file name everyday.  
My company's ELK stack is  
filebeat --\> Logstash --\> Elastic Search.

Do you have any idea why this is happening?

Thanks advanced for your help.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [April 28, 2019, 3:27am UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/2 "2019-04-28T03:27:37Z")

</div>

> [@Jaepyoung\_Kim](#):
>
> 4/12

Do you mean December?

---

<div class="post-metadata">

**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\
**Post date:** [April 28, 2019, 8:22am UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/3 "2019-04-28T08:22:20Z")

</div>

So 13 days old events. Have you checked the time on all nodes involved?

---

<div class="post-metadata">

**Author:** ![Jaepyoung\_Kim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaepyoung_kim/32/44175_2.png) [@Jaepyoung\_Kim](https://discuss.elastic.co/u/Jaepyoung_Kim)\
**Post date:** [April 29, 2019, 8:32pm UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/4 "2019-04-29T20:32:39Z")

</div>

This is April not December.

---

<div class="post-metadata">

**Author:** ![Jaepyoung\_Kim](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jaepyoung_kim/32/44175_2.png) [@Jaepyoung\_Kim](https://discuss.elastic.co/u/Jaepyoung_Kim)\
**Post date:** [April 29, 2019, 8:35pm UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/5 "2019-04-29T20:35:26Z")

</div>

I checked the time in all nodes and nodes are okay.  
It seems like old events and recent events were published at the same time.  
Can you tell me when this can happen?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 27, 2019, 8:35pm UTC](https://discuss.elastic.co/t/very-old-events-are-published-in-elastic-search/178522/6 "2019-05-27T20:35:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.