Splunk Search

Dynamically sort field by specific order?

boxmetal
Path Finder

Hi Splunk community,

I have an excel file that sorts a field at certain order and possibly changes over time
The excel file look something like this
field1
AS
AC
RO
BE
..

Is it possible for me to sort with that particular field order in a search ? Thanks for your help.

 

Labels (3)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @boxmetal,

have you seen the sort command (https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Sort)?

<your_search>
| sort field1

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @boxmetal,

have you seen the sort command (https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Sort)?

<your_search>
| sort field1

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out &gt;&gt; As our brave ...