https://community.splunk.com/t5/Splunk-Search/Help-with-making-stats-table-in-decreasing-order/m-p/644664#M223245 <P>You're asking the <FONT face="courier new,courier">sort</FONT> command to sort on a field that doesn't exist (count).&nbsp; Choose either CPU or JobName for the sort.</P><LI-CODE lang="markup">index=jia source="/hptc_cluster/splunk/Reports/PBS/splunkresults.csv" host="gridmetrics" sourcetype="JiaGridMetrics" | stats count as CPU by JobName | addcoltotals label=Total labelfield=JobName | sort - CPU</LI-CODE><P>&nbsp;</P> Thu, 25 May 2023 16:38:43 GMT richgalloway 2023-05-25T16:38:43Z https://community.splunk.com/t5/Splunk-Search/Help-with-making-stats-table-in-decreasing-order/m-p/644652#M223244 <P>I am looking for the table to be in decreasing order and with the Total row on top.&nbsp;</P><P>This is my current search.&nbsp;</P><LI-CODE lang="markup">index=jia source="/hptc_cluster/splunk/Reports/PBS/splunkresults.csv" host="gridmetrics" sourcetype="JiaGridMetrics" | stats count as Slots by JobName | rename Slots as CPU | addcoltotals label=Total labelfield=JobName | sort count desc</LI-CODE><P>This is the output.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jialiu907_0-1685026069032.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/25547i686080F44F1A2C4A/image-size/large?v=v2&amp;px=999" role="button" title="jialiu907_0-1685026069032.png" alt="jialiu907_0-1685026069032.png" /></span></P><P>&nbsp;</P> Thu, 25 May 2023 14:48:25 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-making-stats-table-in-decreasing-order/m-p/644652#M223244 jialiu907 2023-05-25T14:48:25Z https://community.splunk.com/t5/Splunk-Search/Help-with-making-stats-table-in-decreasing-order/m-p/644664#M223245 <P>You're asking the <FONT face="courier new,courier">sort</FONT> command to sort on a field that doesn't exist (count).&nbsp; Choose either CPU or JobName for the sort.</P><LI-CODE lang="markup">index=jia source="/hptc_cluster/splunk/Reports/PBS/splunkresults.csv" host="gridmetrics" sourcetype="JiaGridMetrics" | stats count as CPU by JobName | addcoltotals label=Total labelfield=JobName | sort - CPU</LI-CODE><P>&nbsp;</P> Thu, 25 May 2023 16:38:43 GMT https://community.splunk.com/t5/Splunk-Search/Help-with-making-stats-table-in-decreasing-order/m-p/644664#M223245 richgalloway 2023-05-25T16:38:43Z