Hi,
As u can see in the image the logs are showing the timestamp of Dec 12 first. The latest one's are of Dec 15. elasticsearch_syslog is the data view created for indices elasticsearch_syslog%timestamp. What can i do too get latest logs at top?
As u can see in the image the logs are showing the timestamp of Dec 12 first. The latest one's are of Dec 15. elasticsearch_syslog is the data view created for indices elasticsearch_syslog%timestamp. What can i do too get latest logs at top?
No it wasn't showing. figured it out. i had missed adding @timestamp while creating the data view. Thank you!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.