https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26279#M5056 <P>Can you please tell how to sort date values ?</P> Thu, 01 Dec 2011 10:48:39 GMT iamniks 2011-12-01T10:48:39Z https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26279#M5056 <P>Can you please tell how to sort date values ?</P> Thu, 01 Dec 2011 10:48:39 GMT https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26279#M5056 iamniks 2011-12-01T10:48:39Z https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26280#M5057 <P>Provide more information on your problem please.</P> Thu, 01 Dec 2011 11:44:49 GMT https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26280#M5057 Ayn 2011-12-01T11:44:49Z https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26281#M5058 <P>You could try</P> <P><CODE>*|sort -_time</CODE></P> <P>Or do you have a unique date value. If its already extracted you could do something like</P> <P><CODE>*|sort -&lt;date_field&gt;</CODE></P> <P>you may need to convert it to epoch time, if you are having issues.</P> Thu, 01 Dec 2011 13:39:20 GMT https://community.splunk.com/t5/Splunk-Search/Date-sorting/m-p/26281#M5058 MHibbin 2011-12-01T13:39:20Z