# Wrong Kibana timestamp

**URL:** <https://discuss.elastic.co/t/wrong-kibana-timestamp/247174>\
**Category:** Kibana\
**Created:** [September 2, 2020, 6:19am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174 "2020-09-02T06:19:06Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![bornatalebi](https://avatars.discourse-cdn.com/v4/letter/b/e68b1a/32.png) [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\
**Post date:** [September 2, 2020, 6:19am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/1 "2020-09-02T06:19:06Z")

</div>

Hello, I have a filebeat running on the same node as my ELK (single node cluster) and the timestamp shown in discover tab is +4:30 which is same as my timezone.

 ![elkdiscover](https://us1.discourse-cdn.com/elastic/original/3X/7/a/7ad9f2e4761d32b79b3bb4c9df219e73b51fb6ad.png)  
for example this doc timestamp is :  
 ![elk3](https://us1.discourse-cdn.com/elastic/original/3X/c/1/c17b9f0c79ef0e3d43bdd06f37fbce12593f1115.png)  
but when i querry the same doc via API the @timestamp field is : "2020-09-02T11:01:19.000Z"

same problem is in the detection tab (last run is in the future 🙂 ) :

 ![elkrules](https://us1.discourse-cdn.com/elastic/original/3X/2/5/25d2a51e74fd4b85dd964914b8f41eb2fc87785d.png)

-timezone setting is kibana is set to "browser"  
-ELK version 7.8

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2020, 6:37am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/2 "2020-09-02T06:37:26Z")

</div>

When you say you query via the API, are you using Console or curl?

If so, you need to manually adjust for that in your query, it's not something the API does for you.

---

<div class="post-metadata">

**Author:** ![bornatalebi](https://avatars.discourse-cdn.com/v4/letter/b/e68b1a/32.png) [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\
**Post date:** [September 2, 2020, 6:41am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/3 "2020-09-02T06:41:11Z")

</div>

I'm using console. but that not my problem. timestamp in kibana is wrong (in the first picture time range is 5 hours from now and i still get results)

---

<div class="post-metadata">

**Author:** ![AClerk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aclerk/32/55297_2.png) [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Post date:** [September 2, 2020, 6:42am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/4 "2020-09-02T06:42:40Z")

</div>

Try restarting ELK services.  
It happens - [Unsynchronized time in Elasticsearch](https://discuss.elastic.co/t/unsynchronized-time-in-elasticsearch/246083/3)  
Might be a product bug 😑

---

<div class="post-metadata">

**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\
**Post date:** [September 3, 2020, 8:10am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/5 "2020-09-03T08:10:05Z")

</div>

Hi

So the UTC value of the doc is` 2020-09-02T11:01:19.000Z`, and since your timezone is +4:30 , what is displayed ` 2020-09-02T15:31:19.000`. Since you're setting Kibana to your browser timezone, this is displayed correctly. You can set the value to UTC then same value would be displayed. Is the persisted timestamp right? could you check the time + timezone on the machine that runs filebeat?

Thx & Best,  
Matthias

---

<div class="post-metadata">

**Author:** ![bornatalebi](https://avatars.discourse-cdn.com/v4/letter/b/e68b1a/32.png) [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\
**Post date:** [September 6, 2020, 8:40am UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/6 "2020-09-06T08:40:25Z")

</div>

Hi, sorry for the late reply. the problem was someone in our team changed firewall rules causing problems for NTP setting in the elk machine.  
so not a problem from ELK.

---

<div class="post-metadata">

**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\
**Post date:** [September 8, 2020, 2:07pm UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/7 "2020-09-08T14:07:18Z")

</div>

Thx for letting us know! great that you managed to fix it! So the machine thought it was in a different timezone :), hope it didn't mind that it was forced to time travel!

Best,  
Matthias

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2020, 2:07pm UTC](https://discuss.elastic.co/t/wrong-kibana-timestamp/247174/8 "2020-10-06T14:07:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
