Github user merrimanr commented on the issue:
https://github.com/apache/metron/pull/734
Great job on this. I spent a lot of time testing and had trouble finding
anything wrong. The one thing I did notice was that the "timestamp" field was
missing from documents in the metaalerts index. This is the field we commonly
use for sorting so we might want to consider adding it or switching our default
sort field to "_timestamp" instead. ---
