All Apps and Add-ons

Query in Splunk with ORDER By Desc not working

jyoti2bhagat
Engager

I need to fetch data from salesforce in Splunk using Splunk Connector,
'Order By' is mandatory in Splunk and but it does not support 'Order By desc'.

I need to sort the data in Order By Desc only.
Any way to do it in connector.Please suggest

0 Karma

to4kawa
Ultra Champion

try | sort 0 _time OR | reverse

jyoti2bhagat
Engager

do you mean to say query will be like this..
select id from account sort 0_time OR
select id from account reverse

0 Karma

to4kawa
Ultra Champion

If this question is not related SPL, I'm sorry.
This's not SOQL.

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...