Commit 1962e4b5 authored by ale's avatar ale
Browse files

Sort results

parent 187604c2
Pipeline #14305 passed with stages
in 1 minute and 4 seconds
......@@ -4,8 +4,7 @@ logcat
Dumps syslog-formatted entries from an Elasticsearch-backed Logstash
index.
It uses Elasticsearch's *scroll* API, so the results may not be sorted
by time.
It uses Elasticsearch's *scroll* API.
## Installation
......
......@@ -52,8 +52,6 @@ server to talk to.
The command-line arguments should contain an Elasticsearch query,
in the standard QueryString syntax.
The output is not necessarily sorted by timestamp.
Known options:
`)
......@@ -202,6 +200,7 @@ func runQuery(client *elastic.Client, query elastic.Query, indexes []string, w i
scroll := client.Scroll(indexes...).
Query(query).
Sort("@timestamp", true).
Size(*batchSize).
KeepAlive("10m")
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment