Reordering fields

[mnj1809]

Hello Splunkers,

I've a Region filter over the dashboard. This Region filter has values AMER and EMEA.

I've a requirement to reorder the above fields based on the selection of Region filter as follows. I want "<Region> Mandatory" field to be appear before "<Region> All"

Thanks in advance.

@tscroggins @yuanliu @bowesmana 

[ITWhisperer · Accepted solution]

Try putting an extra space before Mandatory so that lexicographical sorting will prioritise above single spaced values

| foreach "* Mandatory"
    [| rename "<<FIELD>>" as "<<MATCHSEG1>>  Mandatory"]

[mnj1809]

Thanks @ITWhisperer. It work like a charm.

[gcusello]

Hi @mnj1809,

could you share your search and the possible values for regions in text mode?

Ciao.

Giuseppe