Splunk Search

sort coliumns row wise

Mohsin123
Path Finder

Hi ,

I have a rsult set like this :

status eSIMEntitlement selfcare oauth2 account customer catalog moat dub identifiers iot token msisdn loyalty pushnotification
status-500 17534 0 0 0 26517 0 0 2 40080 354 3201 6538 193 18
status-400 12 0 3 0 18725 1 0 38950 16708 6277 10722 0 273 418

i want to present top coloumns with status-500 and status-400 in x axis
is there a way to sort coloiumns based on row .

Tags (1)
0 Karma

woodcock
Esteemed Legend

This is not clear. Show the raw data and then show what it should look like post-sort.

0 Karma

493669
Super Champion

use |sort status command

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Introducing the 2026 - 2027 SplunkTrust cohort!

The goal of the SplunkTrust™ membership has historically been to acknowledge and recognize those who go above ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...