https://community.splunk.com/t5/Dashboards-Visualizations/Sort-to-show-error-on-top-in-pivot-table/m-p/560551#M38984 <P>Hi all,</P><P>I currently have a pivot table which has column named 'alias'. I was wondering is there a way to sort that column such that the value "error" always shows up on top, then the remaining values will show under it.</P><P>The default alphabetical orders don't work here as in both alphabetical and reverse alphabetical order, error does not show up ontop and instead shows up somewhere in the middle.&nbsp;</P><P>Any help would be greatly appreciated!</P> Fri, 23 Jul 2021 03:51:09 GMT shakSplunk 2021-07-23T03:51:09Z https://community.splunk.com/t5/Dashboards-Visualizations/Sort-to-show-error-on-top-in-pivot-table/m-p/560551#M38984 <P>Hi all,</P><P>I currently have a pivot table which has column named 'alias'. I was wondering is there a way to sort that column such that the value "error" always shows up on top, then the remaining values will show under it.</P><P>The default alphabetical orders don't work here as in both alphabetical and reverse alphabetical order, error does not show up ontop and instead shows up somewhere in the middle.&nbsp;</P><P>Any help would be greatly appreciated!</P> Fri, 23 Jul 2021 03:51:09 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Sort-to-show-error-on-top-in-pivot-table/m-p/560551#M38984 shakSplunk 2021-07-23T03:51:09Z https://community.splunk.com/t5/Dashboards-Visualizations/Sort-to-show-error-on-top-in-pivot-table/m-p/560566#M38985 <P>You could try something like this</P><LI-CODE lang="markup">| eval alias=if(alias="error"," error",alias) | sort alias | eval alias=if(alias=" error","error",alias)</LI-CODE> Fri, 23 Jul 2021 06:19:12 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Sort-to-show-error-on-top-in-pivot-table/m-p/560566#M38985 ITWhisperer 2021-07-23T06:19:12Z