Are there between event 101 and 194 indications of time change, like NTP or so ?
I hope the event numbering remains chronological, regardless what happens.
I am trying to derive some logic but it doesn't make sense indeed ...
If column Time is used, it should sort correctly whatever there is behind the scenes.
Have you reported this to
support@mikrotik.com ?
Adding: are you seeing the same behavior in Winbox ? Could be Webfig specific, that's why I ask.