ELK log collection

Create a log index to sort documents in reverse order by the time field datetime
PUT http://ip:9200/index name

{"settings" : {"number_of_shards": 1,"number_of_replicas": 0 ,"index" : {"sort.field" : "time","sort.order" : "desc"}},"mappings": {"properties": {"time": {"type": "date"}}}}