https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387594#M113053 <P>The rounding of search results has already been discussed numerously. But unfortunately, it doesn't work for me.<BR /> I want to sort the result by total_time in descending order:</P> <PRE><CODE>index="main" sourcetype="web_ping" response_code="200" | stats latest(total_time) by title | sort -num(total_time) </CODE></PRE> <P>But the result is still sorted by the title.</P> <PRE><CODE>title latest(total_time) brxxx 34.03 bsxxx 86.04 efxxx 157.03 gxxx 265.71 loxxx 340.82 stexxx 179.74 thxxx 239.87 winxxxe 292.73 </CODE></PRE> <P>Do you have a hint? Thank you!</P> Sat, 13 Jul 2019 13:51:34 GMT tobi2k 2019-07-13T13:51:34Z https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387594#M113053 <P>The rounding of search results has already been discussed numerously. But unfortunately, it doesn't work for me.<BR /> I want to sort the result by total_time in descending order:</P> <PRE><CODE>index="main" sourcetype="web_ping" response_code="200" | stats latest(total_time) by title | sort -num(total_time) </CODE></PRE> <P>But the result is still sorted by the title.</P> <PRE><CODE>title latest(total_time) brxxx 34.03 bsxxx 86.04 efxxx 157.03 gxxx 265.71 loxxx 340.82 stexxx 179.74 thxxx 239.87 winxxxe 292.73 </CODE></PRE> <P>Do you have a hint? Thank you!</P> Sat, 13 Jul 2019 13:51:34 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387594#M113053 tobi2k 2019-07-13T13:51:34Z https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387595#M113054 <P>total_time does not exist. It is now latest (total_time).</P> <PRE><CODE>| stats latest(total_time) by title | sort -latest(total_time) </CODE></PRE> Wed, 30 Sep 2020 01:18:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387595#M113054 HiroshiSatoh 2020-09-30T01:18:26Z https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387596#M113055 <P>Thanks for your answer. I don't get it.</P> <PRE><CODE>index="main" sourcetype="web_ping" response_code="200" | stats latest(total_time) by title | sort -latest </CODE></PRE> <P>still deliver the result in the wrong order (highest number first)</P> <PRE><CODE> title latest(total_time) bxxx 30.01 bxxx 84.33 efxxx 144.48 gxxx 251.93 loxxx 263.72 etc... </CODE></PRE> Sat, 13 Jul 2019 15:23:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387596#M113055 tobi2k 2019-07-13T15:23:56Z https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387597#M113056 <P>Please look at my answer.</P> Sun, 14 Jul 2019 00:21:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387597#M113056 HiroshiSatoh 2019-07-14T00:21:46Z https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387598#M113057 <P>Works like a charm! Thank you!</P> Mon, 22 Jul 2019 06:16:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sort-search-results-by-numbers/m-p/387598#M113057 tobi2k 2019-07-22T06:16:18Z