I am trying to sort the column headers of a chart (dates) so they appear with the most recent date on the far left. I was able to use eval strptime/strftime to get it to treat the values as a date format, but I cannot seem to get ascending / descending to work.
index="testname" sourcetype="source" ProjectName="Systems" | eval RunDate = strptime(RunDate, "%m/%d/%Y") | sort RunDate | eval RunDate = strftime(RunDate, "%m/%d/%Y") | eval roundValue = round($Value$, 3) |chart Sum(roundValue) by PageName,RunDate | head 150
With this, my column headers, from left to right, are:
[index], PageName, 08/22/2018, 08/29/2018, 09/05/2018, 10/03/2018... etc.
Is it possible for me to sort these to be
[index], PageName, 10/03/2018, 09/05/2018, 08/29/2018.. etc??
