# Why is my timestamp in Logstash output appear different from value in Oracle column?

**URL:** https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869
**Category:** Logstash
**Created:** [November 8, 2017, 1:17pm UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869 "2017-11-08T13:17:21Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [November 8, 2017, 1:17pm UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/1 "2017-11-08T13:17:21Z")

</div>

Hi,

I am using Logstash 5.6.3. I am fetching some rows from oracle db. In SQL Developer, my timestamp is displayed like **07-11-17 01:35:35.461000000 PM**. When I `stdout{ codec => json }` in Logstash, it is displayed like **2017-11-07T08:05:35.461Z**. Why is this happening and how can I fix this?

Thanks in advance.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 8, 2017, 1:27pm UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/2 "2017-11-08T13:27:14Z")

</div>

What timezone is 07-11-17 01:35:35.461000000 PM?

---

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [November 8, 2017, 1:33pm UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/3 "2017-11-08T13:33:35Z")

</div>

hi @magnusbaeck its UTC

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 8, 2017, 1:49pm UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/4 "2017-11-08T13:49:07Z")

</div>

What does your configuration look like? What does an example event produced by Logstash look like? Use a `stdout{ codec => rubydebug }` output.

---

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [November 9, 2017, 5:40am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/5 "2017-11-09T05:40:03Z")

</div>

> [@magnusbaeck](#):
>
> rubydebug

hi @magnusbaeck , below is the output

```
{
       "@version" => "1",
    "timefield" => 2017-11-07T08:05:35.461Z,
        "logtype" => "mylogs",
     "@timestamp" => 2017-11-09T05:46:41.158Z
}

```

here is my configuration;

```
input {
	jdbc {
		jdbc_driver_library => "/setup/GA563/logstash-5.6.3/ojdbc6.jar"
		jdbc_driver_class => "Java::oracle.jdbc.driver.OracleDriver"
		jdbc_connection_string => "jdbc:oracle:thin:@192.168.0.1:1521:test"
		jdbc_user => "user1"
		jdbc_password => "user1"
		statement => "SELECT timefield FROM test_table where id = '1a'"
		add_field => { "logtype" => "mylogs" }
	}	
}
output{
	stdout{ codec => rubydebug }
}

```

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 9, 2017, 6:46am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/6 "2017-11-09T06:46:35Z")

</div>

Perhaps the timestamp is assumed to be local time and therefore converted to UTC. I don't think you can disable that conversion, but what if you change the query to convert the timestamp to local time? Then the UTC conversion should produce the expected results.

---

<div class="post-metadata">

### Author: ![elasticheart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticheart/32/65189_2.png) [@elasticheart](https://discuss.elastic.co/u/elasticheart)
#### Post date: [November 9, 2017, 7:43am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/7 "2017-11-09T07:43:00Z")

</div>

Hi @magnusbaeck,  
can u kindly suggest a timezone to change my query? I can see that there is a difference of 6.30 hrs. How can I do this conversion? Kindly advise.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 9, 2017, 8:14am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/8 "2017-11-09T08:14:23Z")

</div>

Sorry, I'm not fluent in Oracle's flavor of SQL.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 7, 2017, 8:14am UTC](https://discuss.elastic.co/t/why-is-my-timestamp-in-logstash-output-appear-different-from-value-in-oracle-column/106869/9 "2017-12-07T08:14:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
