Splunk Search

How to change the order of dynamic columns based on count?

splunk24
Path Finder

There is a requirement to change the order of columns on the basis of count.
for eg.
A B C D
4 2 1 3

output should be:
C B D A
1 2 3 4

Constraints:
We don't know the column names, so we can't use table C B D A

0 Karma

sundareshr
Legend

Here's a similar question with an answer. See if that will work for you

https://answers.splunk.com/answers/89367/table-sort-columns-numerically.html

Get Updates on the Splunk Community!

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...

State of Splunk Careers 2024: Maximizing Career Outcomes and the Continued Value of ...

For the past four years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...

Data-Driven Success: Splunk & Financial Services

Splunk streamlines the process of extracting insights from large volumes of data. In this fast-paced world, ...