Tabular Operators
order operator
Sorts the rows of the input dataset into order by one or more fields.
Syntax
| order by Field [asc], Field2 [desc]
Arguments
name | type | description |
---|---|---|
Field | string | Field of dataset by which to sort. The type of the values must be numeric, date, time, or string. |
asc | expression | Sort by into ascending order, low to high |
desc | expression | descending high to low |
Example
['http-logs']
| order by ['geo.country'] asc, method desc