https://community.splunk.com/t5/Splunk-Search/Reordering-columns-not-working-through-API/m-p/98488#M25349 <P>I want to reorder my columns. I tried both <EM>table</EM> and <EM>fields</EM>, and they seemed to work through the web UI, but when I tried it through the REST API the order did not change at all.</P> <P>Is there any known problem with reordering through REST API, or can anyone point out what I'm doing wrong? Below is my query.</P> <PRE><CODE>index=na1 host=*app* logRecordTypeseclk=1 earliest=-5h tableEnumOrId=Contact OR tableEnumOrId=CollaborationGroup | where rank &lt; 10 | stats count by rank, tableEnumOrId | table count, tableEnumOrId, rank </CODE></PRE> <P>EDIT:</P> <P>I asked this a while ago but I think the issue is somehow <CODE>stats</CODE> is affecting <CODE>table</CODE>. When I change <CODE>stats count by rank, tableEnumOrId</CODE> to <CODE>stats count by tableEnumOrId, rank</CODE>, the output order changed accordingly. But no matter how I change the ordering of the column names in <CODE>table</CODE>, nothing changes.</P> <P>Is this a known issue? Or am I just doing something wrong?</P> Wed, 17 Jul 2013 18:17:54 GMT whateverwhouare 2013-07-17T18:17:54Z https://community.splunk.com/t5/Splunk-Search/Reordering-columns-not-working-through-API/m-p/98488#M25349 <P>I want to reorder my columns. I tried both <EM>table</EM> and <EM>fields</EM>, and they seemed to work through the web UI, but when I tried it through the REST API the order did not change at all.</P> <P>Is there any known problem with reordering through REST API, or can anyone point out what I'm doing wrong? Below is my query.</P> <PRE><CODE>index=na1 host=*app* logRecordTypeseclk=1 earliest=-5h tableEnumOrId=Contact OR tableEnumOrId=CollaborationGroup | where rank &lt; 10 | stats count by rank, tableEnumOrId | table count, tableEnumOrId, rank </CODE></PRE> <P>EDIT:</P> <P>I asked this a while ago but I think the issue is somehow <CODE>stats</CODE> is affecting <CODE>table</CODE>. When I change <CODE>stats count by rank, tableEnumOrId</CODE> to <CODE>stats count by tableEnumOrId, rank</CODE>, the output order changed accordingly. But no matter how I change the ordering of the column names in <CODE>table</CODE>, nothing changes.</P> <P>Is this a known issue? Or am I just doing something wrong?</P> Wed, 17 Jul 2013 18:17:54 GMT https://community.splunk.com/t5/Splunk-Search/Reordering-columns-not-working-through-API/m-p/98488#M25349 whateverwhouare 2013-07-17T18:17:54Z https://community.splunk.com/t5/Splunk-Search/Reordering-columns-not-working-through-API/m-p/98489#M25350 <P>Hi!</P> <P>I'm having the same issue with REST and I do not see anyway to fix it so far.</P> <P>I've just upgraded from Splunk 5.0.5 to 6.2.2 and noticed the behavior.</P> Tue, 24 Mar 2015 20:39:18 GMT https://community.splunk.com/t5/Splunk-Search/Reordering-columns-not-working-through-API/m-p/98489#M25350 nicolas_perreau 2015-03-24T20:39:18Z