Splunk Search

How to you sort twice in chart?

corematrix
New Member

I've created my graph but the data is in the wrong order. I want to be able to rearrange the columns.

How would i do this?

alt text

Tags (1)
0 Karma

woodcock
Esteemed Legend

You rearrange columns with by adding table to the end of your search like this:

You Existing Search Here
| table x y z a b c
0 Karma

somesoni2
Revered Legend

What's the expected output?

0 Karma

jluo_splunk
Splunk Employee
Splunk Employee

You could use the table command to hardcode the ordering of the table - do you have a need to make it dynamic?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...