I Hadn't.  That worked.   Thank you so much.   Got there in the end  :):):) ... View more

Hi gcusello I've managed to sort the data in date order by changing the date to epoch time which works great for the Statistics page but because the Epoch Time is showing on the graph it won't show the costs on the graph as well.   Any idea how to remove the epoch time after adding it without it taking away all the data? This is the query i used to enable sorting by date source="Book7.csv" host="xxxx" sourcetype="csv"| chart sum(Cost) sum(Total) over "Booking Date" | rename "Booking Date" AS Booking_Date | convert timeformat="%d/%m/%Y" mktime(Booking_Date) as "ConvertedEpochTime" | sort "ConvertedEpochTime" This is how the data looks in Statistics   So I need to remove the data in the last column for the graphs.  Any ideas? ... View more

It's strange isn't it? Thank you for trying to help but that's not worked either.  I think I'll have to rethink how we use the original data.   Many thanks ... View more

Hi gcusello Thank you.  I know the fields are case sensitive but for some reason when I change them all to be the same the date disappears completely.  See below. When I change all but the first to b instead of B it works over "Booking Date" | eval "booking Date"=strptime(timeStr,"%d/%m/%Y") | sort "booking Date" | eval "booking Date"=strftime(timeStr,"%d/%m/%Y") but that still won't sort the booking dates in order. Although I know it's better to not have gaps in the field names the field names have come from the spreadsheet but it's too complicated to work on sorting and renaming at the same time so I want to sort the date order issue out first. Thanks   ... View more

Hi gcusello Thanks for helping on this. The original search I did trying to sort by date is  source="Book7.csv" host="xxxxx" sourcetype="csv"| chart sum(Cost) sum(Total) over "Booking Date" | eval "booking Date"=strptime(timeStr, "%d %m %Y") |sort "Booking Date" The data is from a column with booking dates, a column with costs and column with the total costs.   When I changed the last bit it still did the same thing, just sorts by day.   Thanks       ... View more

I replaced timeStr with my field name is that right?  It still doesn't work.     ... View more

Yes the date format is dd/mm/yyyy. Where in the query you've given the example on would I put the field name? ... View more