X-Pack: Add index time sorting to log indices templates

[elasticmachine]

Original comment by @spinscale:

We have a bunch of time based indices in x-pack, none of them uses index time sorting, even though searching would benefit a lot from that, especially the monitoring UI/watcher UI.

• Watcher: History indices
• Security: Audit log
• Monitoring: the kibana/ES time based indices

[elasticmachine]

Original comment by @pickypg:

What's the setting for this?

[elasticmachine]

Original comment by @spinscale:

@pickypg see https://www.elastic.co/guide/en/elasticsearch/reference/6.2/index-modules-index-sorting.html

PUT foo
{
    "settings" : {
        "index" : {
            "sort.field" : "date", 
            "sort.order" : "desc" 
        }
    },
    "mappings": {
        ...
    }
}

Note, tracking hit counting might make sense for queries, where we dont need the hit count to speed them up.

[dakrone]

Internal monitoring has been deprecated for quite a while, and we're no longer doing any active development on it. I'm going to close this issue.