High resolution "sort by" in Kibana >Discover

Elastic Stack Kibana
1

Hi,

We have some very verbose logs down to microsecond resolution. Our timestamp is the following format:

YYYY-MM-DD HH:mm:ss.SSSSSS

I have passed everything except the last three SSS to date{} to override @timestamp, which works, however I am seeing logs out of order.

I then had my devs add a microseconds field to the logs with the plan on converting it to a number field then being able to sort on it, however timestamps that look like this: 1919031265000000 don't fit in an int, and I just found out long isn't supported by mutate->convert.

What can I do in this situation?

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.