Multiple tiebreaker fields for logs

The property config.xpack.infra.sources.default.fields.tiebreaker only appears to support a single field, and Kibana will show "There are no log messages to display." if it's missing.

Instead it should support multiple, the same as context:tieBreakerFields. Especially as there's no built-in solution to generate sequence numbers in logstash if they're missing.

A comma-separated list of fields to use for tiebreaking between documents that have the same timestamp value. From this list the first field that is present and sortable in the current index pattern is used.

Specifically I want to be able to set it to seq,_doc.

I would suggest opening an issue for this at

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.