Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

6.2.2 timestamps could be out of order #29128

Closed
maverick220 opened this issue Mar 18, 2018 · 3 comments
Closed

6.2.2 timestamps could be out of order #29128

maverick220 opened this issue Mar 18, 2018 · 3 comments

Comments

@maverick220
Copy link

Elasticsearch version (bin/elasticsearch --version): 6.2.2

Plugins installed: None

JVM version (java -version):

OS version (uname -a if on a Unix-like system): Windows

Description of the problem including expected versus actual behavior:
In 6.2.2, we are seeing an issue if 2 (or more) log messages came out with the same millisecond in their timestamp, their order in Kibana output (if sorted by timestamps) could be unpredictably messed up/misordered.

Thanks!

@dadoonet
Copy link
Member

I think it's a duplicate of #10005 where nanoseconds could help. So I'm going to close it.

If you don't think it is, please open a question on discuss.elastic.co where we can discuss about it.

@maverick220
Copy link
Author

Don't think this is the same. I'll revert to the elastic.co board.

@dadoonet
Copy link
Member

@maverick220 Sure?

From #10005

The biggest impact of this is during sorting of search results. If you sort chronologically, newest-first, by a date field, documents with the same date will probably be sorted incorrectly (because they match). This is often reported by users seeing events "out of order" when they have the same timestamp. Specific example being sorting by date and seeing events in newest-first order, unless there is a tie, in which case oldest-first (or first-written?) appears. This causes a bit of confusion for the ELK use case.

Isn't what you reported?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants