Splunk Search
Highlighted

Date sorting

Explorer

Can you please tell how to sort date values ?

Tags (2)
0 Karma
Highlighted

Re: Date sorting

Legend

Provide more information on your problem please.

0 Karma
Highlighted

Re: Date sorting

Influencer

You could try

*|sort -_time

Or do you have a unique date value. If its already extracted you could do something like

*|sort -<date_field>

you may need to convert it to epoch time, if you are having issues.

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.