Splunk Search

splunk.Intersplunk.outputResults to return the results in a determined order

lpolo
Motivator

I have a set of custom search commands that are working fine but I need splunk.Intersplunk.outputResults to return the results is a determined order.

Any idea: How can I force "splunk.Intersplunk.outputResults" to return the results in a determined order?

Thanks,
Lp

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Looking at this from a Python point of view, one row/event is a dict... which is inherently not ordered. There may be Splunk magic in the background though.

Have you tried using an OrderedDict?

lpolo
Motivator

That is what I am looking for. I have not used OrderedDict. I will try... Thanks for the suggestion.

0 Karma

lpolo
Motivator

I mean column/field order...

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Are you talking about row/event order or column/field order?

0 Karma
Get Updates on the Splunk Community!

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...