Elasticsearch query

My siem only allows any querys inside query{}

I need to do a sort by date like this but the sort needs to be inside the query , any ideas

GET /index-*/_search
{
  "sort" : [
    { "@timestamp" : {"order": "desc"}}
  ],
  "query" : {
        "match_all": {}
  }
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.