# Events listing out of order in Kibana 6.2.2

**URL:** https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439
**Category:** Kibana
**Created:** [March 18, 2018, 10:30am UTC](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439 "2018-03-18T10:30:27Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![maverick220](https://avatars.discourse-cdn.com/v4/letter/m/d78d45/32.png) [@maverick220](https://discuss.elastic.co/u/maverick220)
#### Post date: [March 18, 2018, 10:30am UTC](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439/1 "2018-03-18T10:30:27Z")

</div>

We are seeing an issue if 2 (or more) log messages came out with the same millisecond in their timestamp, their order in Kibana output (if sorted by timestamps) could be unpredictably listed out of order. See pic for details.

 ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/e/e/eea11f2471f747cd6cb87e62503eaa2a6acbb3ac.png)

---

<div class="post-metadata">

### Author: ![timroes](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timroes/32/19712_2.png) [@timroes](https://discuss.elastic.co/u/timroes)
#### Post date: [March 19, 2018, 12:15pm UTC](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439/2 "2018-03-19T12:15:43Z")

</div>

Hi,

the actual problem here is, that Elasticsearch stores a date time as a UNIX timestamp in milliseconds. What you see in Discovery in the \_source is the actual stored value, not the indexed one. So even though it looks like Elasticsearch has that information from your original document it doesn't have any information for sorting below the `.399` seconds, and thus those two documents occur on the same date. You can follow the appropriate Elasticsearch ticket [#10005](https://github.com/elastic/elasticsearch/issues/10005).

A workaround could be to index the nanosecond timestamp you actually have, in a separate field of type `long` instead of a datetime field. That way no precision will be lost, and you can sort for that field, and could use the `@timestamp` field for the operations where you require a date field.

Cheers,  
Tim

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 16, 2018, 12:16pm UTC](https://discuss.elastic.co/t/events-listing-out-of-order-in-kibana-6-2-2/124439/3 "2018-04-16T12:16:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.