https://community.splunk.com/t5/Splunk-Search/How-to-custom-sort-by-column-headers/m-p/512436#M143725 <P>use table command to re arrange table header:</P><P>&nbsp;</P><P>| table server critical major minor info</P> Tue, 04 Aug 2020 19:21:13 GMT thambisetty 2020-08-04T19:21:13Z https://community.splunk.com/t5/Splunk-Search/How-to-custom-sort-by-column-headers/m-p/512420#M143717 <DIV class="lia-message-body lia-component-message-view-widget-body lia-component-body-signature-highlight-escalation lia-component-message-view-widget-body-signature-highlight-escalation"><DIV class="lia-message-body-content"><P>I have a table that shows the number of logs by severity over each host.&nbsp; I want to be able to rearrange the severity columns into a specific order but can't figure out how.&nbsp; I tried using custom sort field via eval but didn't seem to work.</P><P><STRONG>Current SPL</STRONG></P></DIV></DIV><P>&nbsp;</P><LI-CODE lang="markup">index=foo sourcetype=logs | chart count over server by severity</LI-CODE><P>&nbsp;</P><P><BR /><STRONG>Current Table Order</STRONG></P><P>&nbsp;</P><LI-CODE lang="markup">server major info critical minor serverA 5 10 8 6 serverB 22 5 13 9</LI-CODE><P>&nbsp;</P><P>&nbsp;</P><P><STRONG>Desired Table Order</STRONG></P><P>&nbsp;</P><LI-CODE lang="markup">server critical major minor info serverA 8 5 6 10 serverB 13 22 9 5</LI-CODE><P>&nbsp;</P> Tue, 04 Aug 2020 17:27:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-custom-sort-by-column-headers/m-p/512420#M143717 DEADBEEF 2020-08-04T17:27:31Z https://community.splunk.com/t5/Splunk-Search/How-to-custom-sort-by-column-headers/m-p/512436#M143725 <P>use table command to re arrange table header:</P><P>&nbsp;</P><P>| table server critical major minor info</P> Tue, 04 Aug 2020 19:21:13 GMT https://community.splunk.com/t5/Splunk-Search/How-to-custom-sort-by-column-headers/m-p/512436#M143725 thambisetty 2020-08-04T19:21:13Z