Hi, Im trying to order a data table visualization by timestamp,but always one row is misplaced, ( i solve this clicking in the arrow of the header of the row) and often I get missing rows when I compare it with discover.
this is what I do:
I start with a top hit agregation in the @timestamp field, then for the others columns of the table I use terms agregation order by max @timestamp.
Does anyone know how is the best way to order rows by timestamp?