When I click the order by timestamp triangle not all entries are ordered

[garyjblackwell]

Kibana version:
7.14.1
Elasticsearch version:
I'm not sure. How do I tell?
Server OS version:
Do you mean the Elastic Server?
Browser version:
Chrome
Browser OS version:
It auto-updates.
Original install method (e.g. download page, yum, from source, etc.):
Cloud
Describe the bug:
I searched in the Kibana Discover search box for event.action:"New-InboxRule", then clicked the order by TimeStamp trianlge. The events do not properly order by TimeStamp.
Steps to reproduce:

1. Click Discover and select the Index, in this case I have selected all indexes.
2. Run a search looking for new inbox rules using event.action:"New-InboxRule".
3. click the triangle to sort by timestamp

Expected behavior:
Properly order the events by their timestamp.
Screenshots (if relevant):

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context:

[elasticmachine]

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

[kertal]

For me this looks like your document table is sorted by more than one columns which was implemented in:
#41918

Could you check if there's another column with the sorting icon visible? Then you would need to de-sort by it (Clicking on it again 1-2 times).

If that doesn't work, could you share the part of Discover's URL that contains the sort state:

thx!

[garyjblackwell]

I don't see a sort icon on the other columns, nor have I clicked any other columns to sort them. I have clicked the sort button several times.
sort:!(!('@timestamp',asc)))

[timroes]

Hi,

Could you maybe go to the Inspect button on the top in the menu and copy us the request that has been send for Documents?

Thanks a lot
Tim

[garyjblackwell]

Please see attached
request_Elastic.txt

[kertal]

I see what's happening, it's just sorting by _score ... this is odd. Is this an index pattern with timefield? could you share the saved object of the saved search "New-InboxRule". many thx!

[garyjblackwell]

You'll have to give me some details on getting the "saved object of the saved search". In my mind, that is the same thing as the query I posted above.

[timroes]

@garyjblackwell You can export saved objects, by going in the menu to Stack Management > Saved Objects and look for the saved object (in this case the saved Discover search). When selecting it you'll find an Export button on the top right, to export that saved object as ndjson.

[garyjblackwell]

savedobject_export.txt
See attached

[kertal]

I gave it another try, but couldn't reproduce. There have been lots of versions released since 7.14.1, and lots of changes in this area. soon 8.5 will be released. In case you've upgraded and still encounter the problem, feel free to reopen the issue. Thx for reporting, and sorry I couldn't help