Add TRUE Ascending Query support to the widget in FieldAnalyzer Mode. This is the mode in the Search and Stream search windows.
Right now, the Graylog2 API for a RelativeSearch /terms query does not support sort order.
It defaults to a descending query which means that the widget is doing a generic "ascending" sort on the descending query once it is returned from Elasticsearch.
Adding the sort order to the API will allow for true ascending queries which will provide the "true" bottom values.
billmurrin
commented
7 years ago
Add TRUE Ascending Query support to the widget in FieldAnalyzer Mode. This is the mode in the Search and Stream search windows.
Right now, the Graylog2 API for a RelativeSearch /terms query does not support sort order.
It defaults to a descending query which means that the widget is doing a generic "ascending" sort on the descending query once it is returned from Elasticsearch.
Adding the sort order to the API will allow for true ascending queries which will provide the "true" bottom values.