https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132919#M36294 <P>Oh, extract just the numbers.... okay I will test this soon and get back. Probably will work.</P> Wed, 16 Apr 2014 21:02:40 GMT bleung93 2014-04-16T21:02:40Z https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132917#M36292 <P>How do I sort this single field properly? I already tried | sort - field_name. I tried creating a rex and then sorting that field, but no changes.</P> <P>field_name</P> <P>value_1_asdfasdfasdf<BR /> value_10_asdfasdfasdf<BR /> Value_11_asdfasdfasdf<BR /> Value_12_asdfasdfasdf<BR /> value_2_asdfasdfasdf<BR /> value_3_asdfasdfasdf<BR /> value_4_asdfasdfasdf<BR /> value_5_asdfasdfasdf<BR /> value_6_asdfasdfasdf<BR /> value_7_asdfasdfasdf<BR /> value_8_asdfasdfasdf<BR /> value_9_asdfasdfasdf</P> <P>I want the results as follows</P> <P>value_1_asdfasdfasdf<BR /> value_2_asdfasdfasdf<BR /> value_3_asdfasdfasdf<BR /> value_4_asdfasdfasdf<BR /> value_5_asdfasdfasdf<BR /> value_6_asdfasdfasdf<BR /> value_7_asdfasdfasdf<BR /> value_8_asdfasdfasdf<BR /> value_9_asdfasdfasdf<BR /> value_10_asdfasdfasdf<BR /> value_11_asdfasdfasdf<BR /> value_12_asdfasdfasdf</P> Mon, 28 Sep 2020 16:23:45 GMT https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132917#M36292 bleung93 2020-09-28T16:23:45Z https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132918#M36293 <P>Try to extract all the digits from the data and then sort it.</P> <PRE><CODE>....|rex field="field_name" "_(?P&lt;dummy&gt;[\d]+)_"|table field_name,dummy|sort +dummy </CODE></PRE> <P>OR</P> <PRE><CODE>....|eval dummy=replace(field_name,"\D","")|table fild_name,dummy|sort dummy </CODE></PRE> <P>Thanks</P> Wed, 16 Apr 2014 04:30:11 GMT https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132918#M36293 linu1988 2014-04-16T04:30:11Z https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132919#M36294 <P>Oh, extract just the numbers.... okay I will test this soon and get back. Probably will work.</P> Wed, 16 Apr 2014 21:02:40 GMT https://community.splunk.com/t5/Splunk-Search/Sort-values-of-a-field-with-double-digit/m-p/132919#M36294 bleung93 2014-04-16T21:02:40Z