Sorting by time is not enough, because docker events prints seconds only. We need a better approach taking state sequences into the account.

Docker traceability table output:
2015-06-03T18:41:51Z create running: true, paused: false, exit code:0
2015-06-03T18:41:51Z die running: false, paused: false, exit code:0
2015-06-03T18:41:51Z start running: false, paused: false, exit code:0