Kibana alerts not sorting properly

[rara01]

Hi,

When trying to sort Alerts in Stack management - Alerts by date started, the sorting is not working as expected. When trying to sort alerts on "Started" from "New to Old", i get what seems randomly sorted values, same goes for "Last updated". Is there some catch to it, or some setting i should change?

[umbo (Umberto Pepato)]

Hey @rara01,

Could you please visit the same page from an incognito browser window and check whether the same issue still happens there?

Thanks!

[rara01]

Hi,

I'm sorry for late response. Yes, this issue still happens, even though it seems little better sorted, but still not correctly.

[umbo (Umberto Pepato)]

Thanks for the update @rara01!

My initial suspicion was that you might be running into a known sorting issue we’re currently addressing. However, if the table remains incorrectly sorted even in a clean incognito browser session, then there may be a different cause.

Just to rule things out, could you please share the contents of localStorage for the key stack-alerts-page-table? Here’s a quick guide on how to view and edit localStorage in case you need it.

Additionally, could you let me know:
• What version of Kibana you’re using?
• Whether you’ve manually changed the mapping or contents of the alerting indices in any way?

Thanks!

[rara01]

Hi,

Here is content of the key.

{"columns":[{"columnHeaderType":"not-filtered","displayAsText":"Alert Status","id":"kibana.alert.status","initialWidth":120,"schema":"string"},{"displayAsText":"Feature","id":"kibana.alert.rule.consumer","schema":"string","initialWidth":180},{"columnHeaderType":"not-filtered","displayAsText":"Last updated","id":"@timestamp","initialWidth":200,"schema":"datetime"},{"columnHeaderType":"not-filtered","displayAsText":"Started","id":"kibana.alert.start","initialWidth":200,"schema":"datetime"},{"columnHeaderType":"not-filtered","displayAsText":"Rule category","id":"kibana.alert.rule.category","initialWidth":160,"schema":"string"},{"columnHeaderType":"not-filtered","displayAsText":"Rule","id":"kibana.alert.rule.name","initialWidth":230,"schema":"string"},{"columnHeaderType":"not-filtered","displayAsText":"Rule tags","id":"kibana.alert.rule.tags","initialWidth":120,"schema":"string"},{"columnHeaderType":"not-filtered","displayAsText":"Evaluation values","id":"kibana.alert.evaluation.values","initialWidth":120,"schema":"numeric"},{"columnHeaderType":"not-filtered","displayAsText":"Evaluation threshold","id":"kibana.alert.evaluation.threshold","initialWidth":120,"schema":"numeric"},{"columnHeaderType":"not-filtered","displayAsText":"Reason","id":"kibana.alert.reason","linkField":"*","initialWidth":260,"schema":"string"},{"columnHeaderType":"not-filtered","displayAsText":"Maintenance windows","id":"kibana.alert.maintenance_window_ids","schema":"string","initialWidth":180}],"sort":[{"kibana.alert.rule.name":{"order":"desc"}},{"kibana.alert.status":{"order":"asc"}},{"kibana.alert.start":{"order":"desc"}}],"visibleColumns":["kibana.alert.status","kibana.alert.rule.consumer","@timestamp","kibana.alert.start","kibana.alert.rule.category","kibana.alert.rule.name","kibana.alert.rule.tags","kibana.alert.evaluation.values","kibana.alert.evaluation.threshold","kibana.alert.reason","kibana.alert.maintenance_window_ids"]}

Kibana is 8.14 and i'm not aware of changes to alerting indices - what exactly do you mean?

Just to confirm, i tried on different computer and also mobile phone, and the sorting is better for first page, but it doesnt contain all info, it just seems like sorting content on first page.
The problem i think is that this alert thing was for years not maintainted and it contains over 5800 alerts.

[Tortoise]

Hello,

If this issue is still not fixed , could you please provide a screenshot where all the columns are visible like below :

This will help to compare all the columns & understand this issue better.

Thanks!!

[rara01]

Well, after all, this seems like user (my) error. I did not notice that there was another sorting rule applied, and it was not being overwritten by setting another sorting rule. After it was properly resetted and then applied again, alerts started to be filtered correctly.