Splunk query for getting logs in descending order based on API execution time

[athul_r_m]

Can some one help me with query for getting logs in descending order based on API execution time which printed on logs.

[gcusello]

Hi @athul_r_m,

your request is just a little too vague!

could you better describe your data?

e.g. fields to display, API execution time fieldname, etc...

Anyway, to sort in descrnding order you have to see the options of the sort command (https://docs.splunk.com/Documentation/SCS/current/SearchReference/SortCommandOverview😞

index=your_index
| sort -API_execution_time
| table API_execution_time field1 field2 field3 

Ciao.

Giuseppe