Skip to content

Commit 7f19f8d

Browse files
authored
Update sort.md
1 parent e0de648 commit 7f19f8d

File tree

1 file changed

+9
-0
lines changed
  • docs/search/search-query-language/search-operators

1 file changed

+9
-0
lines changed

docs/search/search-query-language/search-operators/sort.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,10 @@ Order is also synonymous with sort. You can use them interchangeably in your que
1414
sort by <field> (displays results as descending, by default)
1515
```
1616

17+
```sql
18+
order by <field> (displays results as descending, by default)
19+
```
20+
1721
```sql
1822
sort by +<field> (displays results as ascending)
1923
```
@@ -51,6 +55,11 @@ status AND down | extract "user=(?<user>.*?):" | count (*) group by user | sort
5155
... | count user | sort by _count asc
5256
```
5357

58+
```sql
59+
| parse "GET * " as url | count by url | order by _count
60+
| order by _count asc
61+
```
62+
5463
### Top 10 pages by page hits
5564

5665
This example counts page hits by sourceHost, sorts them by page hits, and limits the results to the top 10.

0 commit comments

Comments
 (0)