Sort results

README.md

@@ -4,8 +4,7 @@ logcat
 Dumps syslog-formatted entries from an Elasticsearch-backed Logstash
 index.
 
-It uses Elasticsearch's *scroll* API, so the results may not be sorted
-by time.
+It uses Elasticsearch's *scroll* API.
 
 
 ## Installation

go.sum

@@ -36,6 +36,7 @@ github.com/google/go-cmp v0.5.0 h1:/QaMHBdZ26BB3SSst0Iwl10Epc+xhTquomWX0oZEB6w=
 github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.5 h1:Khx7svrCpmxxtHBq5j2mp/xVjsi8hQMfNLvJFAlrGgU=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/jmespath/go-jmespath v0.3.0/go.mod h1:9QtRXoHjLGCJ5IBSaohpXITPlowMeeYCZ7fLUTSywik=

logcat.go

@@ -52,8 +52,6 @@ server to talk to.
 The command-line arguments should contain an Elasticsearch query,
 in the standard QueryString syntax.
 
-The output is not necessarily sorted by timestamp.
-
 Known options:
 
 `)
@@ -202,6 +200,7 @@ func runQuery(client *elastic.Client, query elastic.Query, indexes []string, w i
 
 		scroll := client.Scroll(indexes...).
 			Query(query).
+			Sort("@timestamp", true).
 			Size(*batchSize).
 			KeepAlive("10m")