Hi
I have a table as below.
severity S0 S1 S2 S3
event A 1 0 0 0
event B 0 2 0 0
event C 0 1 1 0
each column has different weight. for example S0 = 1,000,000, S1 = 10,000, S2 = 100, S3 = 1. i want to sort the event based on the weight multiply by the event number.
Please advise.
try this:
| eval weight=(S0*1000000 + S1*10000 + S2*100 + S3*1)
| sort 0 - weight
try this:
| eval weight=(S0*1000000 + S1*10000 + S2*100 + S3*1)
| sort 0 - weight
thank you sir.