Splunk Search

splunk.Intersplunk.outputResults to return the results in a determined order

lpolo
Motivator

I have a set of custom search commands that are working fine but I need splunk.Intersplunk.outputResults to return the results is a determined order.

Any idea: How can I force "splunk.Intersplunk.outputResults" to return the results in a determined order?

Thanks,
Lp

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Looking at this from a Python point of view, one row/event is a dict... which is inherently not ordered. There may be Splunk magic in the background though.

Have you tried using an OrderedDict?

lpolo
Motivator

That is what I am looking for. I have not used OrderedDict. I will try... Thanks for the suggestion.

0 Karma

lpolo
Motivator

I mean column/field order...

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Are you talking about row/event order or column/field order?

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...