https://community.splunk.com/t5/Monitoring-Splunk/Splunk-query-for-getting-logs-in-descending-order-based-on-API/m-p/675851#M9983 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/264453">@athul_r_m</a>,</P><P>your request is just a little too vague!</P><P>could you better describe your data?</P><P>e.g. fields to display,&nbsp;<SPAN>API execution time fieldname, etc...</SPAN></P><P><SPAN>Anyway, to sort in descrnding order you have to see the options of the sort command (<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview</A><span class="lia-unicode-emoji" title=":disappointed_face:">😞</span></SPAN></P><LI-CODE lang="markup">index=your_index | sort -API_execution_time | table API_execution_time field1 field2 field3 </LI-CODE><P>Ciao.</P><P>Giuseppe</P><P>&nbsp;</P> Tue, 30 Jan 2024 06:39:27 GMT gcusello 2024-01-30T06:39:27Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-query-for-getting-logs-in-descending-order-based-on-API/m-p/675850#M9982 <P>Can some one help me with query for getting logs in descending order based on API execution time which printed on logs.</P> Tue, 30 Jan 2024 06:19:32 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-query-for-getting-logs-in-descending-order-based-on-API/m-p/675850#M9982 athul_r_m 2024-01-30T06:19:32Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-query-for-getting-logs-in-descending-order-based-on-API/m-p/675851#M9983 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/264453">@athul_r_m</a>,</P><P>your request is just a little too vague!</P><P>could you better describe your data?</P><P>e.g. fields to display,&nbsp;<SPAN>API execution time fieldname, etc...</SPAN></P><P><SPAN>Anyway, to sort in descrnding order you have to see the options of the sort command (<A href="https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview" target="_blank">https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview</A><span class="lia-unicode-emoji" title=":disappointed_face:">😞</span></SPAN></P><LI-CODE lang="markup">index=your_index | sort -API_execution_time | table API_execution_time field1 field2 field3 </LI-CODE><P>Ciao.</P><P>Giuseppe</P><P>&nbsp;</P> Tue, 30 Jan 2024 06:39:27 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-query-for-getting-logs-in-descending-order-based-on-API/m-p/675851#M9983 gcusello 2024-01-30T06:39:27Z