# Saved search

**URL:** <https://discuss.elastic.co/t/saved-search/224176>\
**Category:** Kibana\
**Created:** [March 18, 2020, 7:22pm UTC](https://discuss.elastic.co/t/saved-search/224176 "2020-03-18T19:22:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![liorg2](https://avatars.discourse-cdn.com/v4/letter/l/ed8c4c/32.png) [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Post date:** [March 18, 2020, 7:22pm UTC](https://discuss.elastic.co/t/saved-search/224176/1 "2020-03-18T19:22:29Z")

</div>

Hi,  
I have created a saved search, and no matter how I try to sort the table, it always sorts by @timestamp, AND the column I asked to sort by.  
Is that by design, or something that I have missed?

thanks

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [March 19, 2020, 3:53am UTC](https://discuss.elastic.co/t/saved-search/224176/2 "2020-03-19T03:53:02Z")

</div>

What version of kibana are you using? Using inspector, what is the sort getting applied to your ES query? Have you tried clicking `Time` arrows twice to cycle through desc, asc, off?

---

<div class="post-metadata">

**Author:** ![liorg2](https://avatars.discourse-cdn.com/v4/letter/l/ed8c4c/32.png) [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Post date:** [March 19, 2020, 7:39am UTC](https://discuss.elastic.co/t/saved-search/224176/3 "2020-03-19T07:39:39Z")

</div>

hi @Nathan_Reese

I'm using 7.6.1  
I tried to click few times (asc/desc/stop sorting)

inspect without sort on Time:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e072121fea888f3f7fabd86ab731a60d46e106a8.png)

```
 "sort": [
{
  "@timestamp": {
    "order": "desc",
    "unmapped_type": "boolean"
  }
},
{
  "cpu": {
    "order": "asc",
    "unmapped_type": "boolean"
  }
}
  ],

```

when trying to sort by datetime field:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/4/b432dd7ab30f0303bc0fdd43b0b88b31ee3159c6.png)

```
  "sort": [
{
  "@timestamp": {
    "order": "desc",
    "unmapped_type": "boolean"
  }
},
{
  "datetime": {
    "order": "asc",
    "unmapped_type": "boolean"
  }
}

```

],

no matter how I change the sort,

I always have first the:

```
  {
  "@timestamp": {
    "order": "desc",
    "unmapped_type": "boolean"
  }
},
```

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [March 19, 2020, 12:23pm UTC](https://discuss.elastic.co/t/saved-search/224176/4 "2020-03-19T12:23:07Z")

</div>

When first creating a search, the results are sorted by timestamp.

```auto
"sort": [
    {
      "timestamp": {
        "order": "desc",
        "unmapped_type": "boolean"
      }
    }
  ]

```

Then when you turn on sort for another field, the sort request block looks like

```auto
"sort": [
    {
      "timestamp": {
        "order": "desc",
        "unmapped_type": "boolean"
      }
    },
    {
      "bytes": {
        "order": "asc",
        "unmapped_type": "boolean"
      }
    }
  ]

```

Try hovering over the sort arrows for timestamp. Do they show something like

 ![Screen Shot 2020-03-19 at 6.20.59 AM](https://us1.discourse-cdn.com/elastic/original/3X/2/a/2a9ae6ed3491e88a32fa9ebf52a84afe26e1840a.png)

---

<div class="post-metadata">

**Author:** ![liorg2](https://avatars.discourse-cdn.com/v4/letter/l/ed8c4c/32.png) [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Post date:** [March 19, 2020, 6:06pm UTC](https://discuss.elastic.co/t/saved-search/224176/5 "2020-03-19T18:06:58Z")

</div>

yep:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/4/940deb4e9d27d2cefc8d00e4d5449df277808348.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/6/062e5dd797bf49fd8d85c7ed1d62dac944d5381d.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/b/6b2a60c17b51d82c2bb0dc1a1c0e7261694678b8.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/e/0ef52579a860c0cb108f0a5e7b4261860aaa72f1.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 16, 2020, 6:09pm UTC](https://discuss.elastic.co/t/saved-search/224176/6 "2020-04-16T18:09:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.