How to sort the output with deliminator as ","

[akash_akkis]

Hi I want to search the output with sorted result which has output as below

   2014.09.08 02:52:07.559,2014.09.08 02:52:06.217,**1342**,jhdlkljkljsdjlkj

I want to sort the result as highlighted number 1342

How can I achive this goal using splunk search

[MuS]

Hi akash_akkis,

if the number you need always occurs after the second , you can use something like this:

your base search here | rex "^(?:[^\,]*\,){2}(?<myField>([^\,]*))" | ...

This will get you a new field called myField which can be used further.

hope this helps ...

cheers, MuS