Splunk Search
Highlighted

How to edit my search to sort dates in calendar order?

Explorer

Here is my search:

index=parmed-qa date_wday=monday |table _time date_month date_wday date_mday orderid|sort 0 _time|eval day_month=date_mday+"_"+date_month|chart count(orderid) by  day_month date_wday limit=0|

1august 8
4
july 1
11july 7
15
august 8
18july 4
22
august 11
25_july 4

I want to get all those dates are in calendar order.

0 Karma
Highlighted

Re: How to edit my search to sort dates in calendar order?

Legend

Try this

index=parmed-qa date_wday=monday | timechart count(orderid) as count | eval day_month=strftime(_time, "%d_%B")  
0 Karma