<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to sort field values alphanumerically? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438928#M124898</link>
    <description>&lt;P&gt;@pgadhari,&lt;/P&gt;

&lt;P&gt;Try&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Your current search | rex field=Rack "Rack-(?&amp;lt;_RackNo&amp;gt;\d+)"| sort _RackNo
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Mon, 24 Jun 2019 11:18:58 GMT</pubDate>
    <dc:creator>renjith_nair</dc:creator>
    <dc:date>2019-06-24T11:18:58Z</dc:date>
    <item>
      <title>How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438927#M124897</link>
      <description>&lt;P&gt;I have a field called Rack which has the values as Rack-1 Rack-2 Rack-3....Rack-10. When I do sort on Rack field, it shows the values like below :&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Rack-1
Rack-10
Rack-2
...
...
Rack-9
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I want to show the values as : This is the requirement ?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Rack-1
Rack-2
Rack-3
...
...
Rack-10
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;By default, sort is showing Rack-10 after Rack-1 and then so on. How do I sort it alphanumeric to show the values as required above ? &lt;/P&gt;

&lt;P&gt;Thanks&lt;BR /&gt;
PG&lt;/P&gt;</description>
      <pubDate>Mon, 24 Jun 2019 10:59:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438927#M124897</guid>
      <dc:creator>pgadhari</dc:creator>
      <dc:date>2019-06-24T10:59:37Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438928#M124898</link>
      <description>&lt;P&gt;@pgadhari,&lt;/P&gt;

&lt;P&gt;Try&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Your current search | rex field=Rack "Rack-(?&amp;lt;_RackNo&amp;gt;\d+)"| sort _RackNo
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 24 Jun 2019 11:18:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438928#M124898</guid>
      <dc:creator>renjith_nair</dc:creator>
      <dc:date>2019-06-24T11:18:58Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438929#M124899</link>
      <description>&lt;P&gt;Hi @pgadhari,&lt;/P&gt;

&lt;P&gt;You can use &lt;A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/SearchReference/MultivalueEvalFunctions#mvsort(X)"&gt;mvsort&lt;/A&gt; eval function like:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| eval Rack=mvsort(Rack)
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 24 Jun 2019 12:24:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438929#M124899</guid>
      <dc:creator>harshpatel</dc:creator>
      <dc:date>2019-06-24T12:24:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438930#M124900</link>
      <description>&lt;P&gt;I will check this and revert. Thanks.&lt;/P&gt;</description>
      <pubDate>Wed, 26 Jun 2019 08:12:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438930#M124900</guid>
      <dc:creator>pgadhari</dc:creator>
      <dc:date>2019-06-26T08:12:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438931#M124901</link>
      <description>&lt;P&gt;I will check this and revert. Thanks.&lt;/P&gt;</description>
      <pubDate>Wed, 26 Jun 2019 08:12:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438931#M124901</guid>
      <dc:creator>pgadhari</dc:creator>
      <dc:date>2019-06-26T08:12:50Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438932#M124902</link>
      <description>&lt;P&gt;Thanks. This is working.&lt;/P&gt;</description>
      <pubDate>Sun, 30 Jun 2019 05:05:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438932#M124902</guid>
      <dc:creator>pgadhari</dc:creator>
      <dc:date>2019-06-30T05:05:16Z</dc:date>
    </item>
    <item>
      <title>Re: How to sort field values alphanumerically?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438933#M124903</link>
      <description>&lt;P&gt;This also works. Hence, upvoting the post. Thanks for your reply too.&lt;/P&gt;</description>
      <pubDate>Sun, 30 Jun 2019 05:13:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-sort-field-values-alphanumerically/m-p/438933#M124903</guid>
      <dc:creator>pgadhari</dc:creator>
      <dc:date>2019-06-30T05:13:47Z</dc:date>
    </item>
  </channel>
</rss>

