Sorting events with identical millis timestamps by order events were recorded

matw · February 24, 2022, 9:19am

Hi and welcome to our community

So surrounding docs are sorting by timefield and _doc, Discover itself doesn't.

We might implement this in the future:

github.com/elastic/kibana

[Discover] Add _doc as field you can sort by

opened 08:53AM - 11 Oct 19 UTC

kertal

discuss Feature:Discover Team:DataDiscovery

If you have huge amounts of data with many lots of documents sharing the same ti…mestamp up to the millisecond you might wanna use `_doc` for faster sorting. We should consider adding an option for the user to sort by `_doc` Knowhow about `_doc`: > _doc has no real use-case besides being the most efficient sort order. So if you don’t care about the order in which documents are returned, then you should sort by _doc. This especially helps when scrolling. We should also provide the option to use a tiebreaker in Discover (by default `_doc`), here's an older PR for that #32426

The only way to currently solve this is if you have an own sequence field you can sort by additionally. Or we also support sorting by a timestamp with nanoseconds

But of course most loggers don't support this

Best,
Matthias

Topic		Replies	Views
Logs are not in correct order and timestamp mismatch Kibana	3	531	June 3, 2022
Sorting events with identical timestamps by order events were recorded Kibana	5	3304	August 2, 2017
Documents qui n'apparaissent pas dans le bonne ordre dans kibana Discussions en français	2	961	September 12, 2017
Data with same time stamp out of order Elasticsearch	1	447	July 5, 2017
Events listing out of order in Kibana 6.2.2 Kibana	2	1866	April 16, 2018

Sorting events with identical millis timestamps by order events were recorded

Related topics