{"action":"created","issue":{"url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/164","repository_url":"https://api.github.com/repos/logstash/logstash-logback-encoder","labels_url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/164/labels{/name}","comments_url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/164/comments","events_url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/164/events","html_url":"https://github.com/logstash/logstash-logback-encoder/issues/164","id":155000155,"number":164,"title":"Order of messages in logstash","user":{"login":"sverin","id":2380634,"avatar_url":"https://avatars.githubusercontent.com/u/2380634?v=3","gravatar_id":"","url":"https://api.github.com/users/sverin","html_url":"https://github.com/sverin","followers_url":"https://api.github.com/users/sverin/followers","following_url":"https://api.github.com/users/sverin/following{/other_user}","gists_url":"https://api.github.com/users/sverin/gists{/gist_id}","starred_url":"https://api.github.com/users/sverin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sverin/subscriptions","organizations_url":"https://api.github.com/users/sverin/orgs","repos_url":"https://api.github.com/users/sverin/repos","events_url":"https://api.github.com/users/sverin/events{/privacy}","received_events_url":"https://api.github.com/users/sverin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-05-16T10:15:51Z","updated_at":"2016-06-12T23:25:51Z","closed_at":null,"body":"Our implementation of the logstash logback encoder send multiple messages to the server.\r\nWhen they are sent frequently, i.e. in trace mode, we're having issues sorting them i Kibana.\r\n\r\nIs there a way to see the exact order they have been sent? Or how can we sort to see the exact order?\r\n\r\nNow, we receive multiple messages with the exact timestamp on millisecond."},"comment":{"url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/comments/225466749","html_url":"https://github.com/logstash/logstash-logback-encoder/issues/164#issuecomment-225466749","issue_url":"https://api.github.com/repos/logstash/logstash-logback-encoder/issues/164","id":225466749,"user":{"login":"philsttr","id":7027966,"avatar_url":"https://avatars.githubusercontent.com/u/7027966?v=3","gravatar_id":"","url":"https://api.github.com/users/philsttr","html_url":"https://github.com/philsttr","followers_url":"https://api.github.com/users/philsttr/followers","following_url":"https://api.github.com/users/philsttr/following{/other_user}","gists_url":"https://api.github.com/users/philsttr/gists{/gist_id}","starred_url":"https://api.github.com/users/philsttr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/philsttr/subscriptions","organizations_url":"https://api.github.com/users/philsttr/orgs","repos_url":"https://api.github.com/users/philsttr/repos","events_url":"https://api.github.com/users/philsttr/events{/privacy}","received_events_url":"https://api.github.com/users/philsttr/received_events","type":"User","site_admin":false},"created_at":"2016-06-12T23:25:51Z","updated_at":"2016-06-12T23:25:51Z","body":"Which appender are you using?  The TCP appender or the UDP appender?\r\n\r\nI ask, because ordering is not guaranteed with the UDP appender.\r\n\r\nThe TCP appender will send messages according to the order in which they are logged by the application.  If multiple events occur at the exact same time (by multiple threads), then the events will be sent in the order in which they are enqueued, which would be determined by the thread scheduler.\r\n\r\nThe only way to \"sort\" the messages is by the timestamp, which is stamped by logback, before the appenders in logstash-logback-encoder receive the event.\r\n\r\nSo, unfortunately, there's not really a built-in way to see the order in which they are sent on the application side.\r\n\r\nFor debugging purposes, you could setup logstash with one input, and two outputs (elasticsearch and a file).  Then you could look at the file to determine the order in which they were sent. \r\n\r\n"}}
{"actor":{"display_login":"philsttr"}}