[Security Solution] Fix sorting on unmapped fields in Timeline Events table

patrykkopycinski · patrykkopycinski · commit 0b8f826f571c · 2021-01-04T22:34:16.000+01:00
diff --git a/x-pack/plugins/security_solution/server/search_strategy/timeline/factory/events/all/query.events_all.dsl.ts b/x-pack/plugins/security_solution/server/search_strategy/timeline/factory/events/all/query.events_all.dsl.ts
@@ -49,7 +49,12 @@ export const buildTimelineEventsAllQuery = ({
   const getSortField = (sortFields: SortField[]) =>
     sortFields.map((item) => {
       const field: string = item.field === 'timestamp' ? '@timestamp' : item.field;
-      return { [field]: item.direction };
+      return {
+        [field]: {
+          order: item.direction,
+          unmapped_type: 'text',
+        },
+      };
     });
 
   const dslQuery = {
