order operator

Sorts the rows of the input dataset into order by one or more fields.

Syntax

| order by Field [asc], Field2 [desc]

Arguments

nametypedescription
FieldstringField of dataset by which to sort. The type of the values must be numeric, date, time, or string.
ascexpressionSort by into ascending order, low to high
descexpressiondescending high to low

Example

['http-logs']
| order by ['geo.country'] asc, method desc

Was this page helpful?