https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102501#M26486 <P>Hi</P> <P>how to sort the months according to the calender </P> <P>This is the search query<BR /> source="D:\AVERAGE_CLOSE_TIME.csv" NOT "Month"| stats avg(Avg_Close_Time) as "Average Close Time in Days" by Month</P> <P>This is the output<BR /> 1 Apr-12 29.000000<BR /> 2 Aug-12 18.000000<BR /> 3 Dec-12 22.000000<BR /> 4 Feb-12 36.000000</P> Mon, 28 Sep 2020 13:46:23 GMT ncbshiva 2020-09-28T13:46:23Z https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102501#M26486 <P>Hi</P> <P>how to sort the months according to the calender </P> <P>This is the search query<BR /> source="D:\AVERAGE_CLOSE_TIME.csv" NOT "Month"| stats avg(Avg_Close_Time) as "Average Close Time in Days" by Month</P> <P>This is the output<BR /> 1 Apr-12 29.000000<BR /> 2 Aug-12 18.000000<BR /> 3 Dec-12 22.000000<BR /> 4 Feb-12 36.000000</P> Mon, 28 Sep 2020 13:46:23 GMT https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102501#M26486 ncbshiva 2020-09-28T13:46:23Z https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102502#M26487 <P>Convert your date fieldinto an epoch value 1st, so that it can be sorted.<BR /><BR /> Then <A href="http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Fieldformat">fieldformat</A> the results so they are displayed however you want</P> <PRE><CODE>... | eval Month=strptime("01-".Month,"%d-%b-y") | fieldformat Month=strftime(Month,"%b-%y") </CODE></PRE> <P>Should work out for you</P> Mon, 22 Apr 2013 06:05:49 GMT https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102502#M26487 jonuwz 2013-04-22T06:05:49Z https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102503#M26488 <P>Sorry i did'nt get , can u tell me in detail......?</P> Mon, 22 Apr 2013 11:28:21 GMT https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102503#M26488 ncbshiva 2013-04-22T11:28:21Z https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102504#M26489 <P>just add what I posted to the end of your search ( minus the ... at the beginning )</P> Mon, 22 Apr 2013 11:31:57 GMT https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102504#M26489 jonuwz 2013-04-22T11:31:57Z https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102505#M26490 <P>yes i have added , but i am getting "No results found"</P> Mon, 22 Apr 2013 11:49:44 GMT https://community.splunk.com/t5/Splunk-Search/Sorting-the-months-by-calender-in-splunk/m-p/102505#M26490 ncbshiva 2013-04-22T11:49:44Z