# Maintaining Order of logs with elastic-search search API
**URL:** https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962
**Category:** Elasticsearch
**Created:** [May 8, 2018, 9:10am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962 "2018-05-08T09:10:41Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@shaheryar](https://discuss.elastic.co/u/shaheryar)
#### Post date: [May 8, 2018, 9:10am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/1 "2018-05-08T09:10:41Z")
How can i retrieve logs from elastic search in the order they were generated?
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 8, 2018, 9:30am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/2 "2018-05-08T09:30:55Z")
If you are gathering logs using Filebeat, this will record a timestamp as well as the filename and the offset of the log entry within this file. When you search you should be able to get the correct order by sorting based on timestamp and offset.
---
### Author:  [@shaheryar](https://discuss.elastic.co/u/shaheryar)
#### Post date: [May 8, 2018, 9:47am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/3 "2018-05-08T09:47:22Z")
I have time stamp but not the offset. I am gathering logs from a tcp (input plugin) connection to logstash and forwarding it to elastic search.
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 8, 2018, 9:50am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/4 "2018-05-08T09:50:25Z")
Then you will only be able to order them by timestamp. If multiple documents have the same timestamp I do not you can establish the order between these.
---
### Author:  [@shaheryar](https://discuss.elastic.co/u/shaheryar)
#### Post date: [May 8, 2018, 9:52am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/5 "2018-05-08T09:52:11Z")
ok. thanks for quick response.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 5, 2018, 9:52am UTC](https://discuss.elastic.co/t/maintaining-order-of-logs-with-elastic-search-search-api/130962/6 "2018-06-05T09:52:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.