Hi Avdhoot, while this is in some cases inconvenient, the CSV export does not retain message order by time (or any other field order) because of the internals used to gather the data ( https://www.elastic.co/guide/en/elasticsearch/reference/2.4/search-request-scroll.html ).
You're welcome to file a feature request at https://github.com/Graylog2/graylog2-server/issues/, but it probably won't be implemented in the near future. Cheers, Jochen On Wednesday, 28 September 2016 12:54:36 UTC+2, Avdhoot Dendge wrote: > > When we export csv from web logs are not correctly arranged. Please check > below outout. But they are correctly arranged in web. > > "timestamp" > "2016-09-28T06:38:25.775Z" <-- 25 sec > "2016-09-28T06:38:25.799Z" > "2016-09-28T06:38:25.856Z" > "2016-09-28T06:38:25.886Z" > "2016-09-28T06:38:25.989Z" > "2016-09-28T06:38:25.990Z" > "2016-09-28T06:38:25.998Z" > "2016-09-28T06:38:25.998Z" > "2016-09-28T06:38:26.007Z" > "2016-09-28T06:38:26.089Z" > "2016-09-28T06:38:26.137Z" > "2016-09-28T06:38:26.136Z" > "2016-09-28T06:38:26.313Z" > "2016-09-28T06:38:26.383Z" > "2016-09-28T06:38:22.956Z" > "2016-09-28T06:38:22.974Z" > "2016-09-28T06:38:23.071Z" > "2016-09-28T06:38:23.116Z" > "2016-09-28T06:38:23.118Z" > "2016-09-28T06:38:23.117Z" > "2016-09-28T06:38:23.122Z" > "2016-09-28T06:38:23.193Z" > "2016-09-28T06:38:23.220Z" > "2016-09-28T06:38:23.396Z" > "2016-09-28T06:38:23.397Z" > "2016-09-28T06:38:23.424Z" > "2016-09-28T06:38:23.424Z" > "2016-09-28T06:38:24.381Z" > "2016-09-28T06:38:24.406Z" > "2016-09-28T06:38:24.415Z" > "2016-09-28T06:38:24.433Z" > "2016-09-28T06:38:24.433Z" > "2016-09-28T06:38:24.991Z" > "2016-09-28T06:38:25.003Z" > "2016-09-28T06:38:25.005Z" > "2016-09-28T06:38:25.066Z" > "2016-09-28T06:38:25.095Z" > "2016-09-28T06:38:25.110Z" > "2016-09-28T06:38:25.142Z" <-- again 25 sec > "2016-09-28T06:38:25.143Z" > "2016-09-28T06:38:25.224Z" > "2016-09-28T06:38:27.427Z" > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/98f24672-24ce-4823-9553-85ea8b261370%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
