When we use time range picker to select the time from "Present" time section it is showing jumbled events with the improper order but when we select same timing using "Date & Time range" section it is showing proper events in reverse chronological order.
Bot time the number of events in the output will be same.
I recommend to install the version 7.0.3, I think it's the most stable release for the moment.
So you mean to say this is the bug in 7.1.0 ??
If you want to stick with 7.1 then at least install 7.1.1, if you still have the problem even with the latest version then yes I recommend 7.0.3
Ok. We have raised a case with Splunk. Let's see if it can be resolved without upgrading to 7.1.1
Did you get an answer from splunk?
it's a bug in Splunk.
This issue is happening after we upgraded Splunk from 6.3 to 7.1.
"Presets" in time picker is not working properly.