File tree Expand file tree Collapse file tree 1 file changed +9
-0
lines changed
docs/search/search-query-language/search-operators Expand file tree Collapse file tree 1 file changed +9
-0
lines changed Original file line number Diff line number Diff line change @@ -14,6 +14,10 @@ Order is also synonymous with sort. You can use them interchangeably in your que
1414sort by < field> (displays results as descending, by default)
1515```
1616
17+ ``` sql
18+ order by < field> (displays results as descending, by default)
19+ ```
20+
1721``` sql
1822sort by + < field> (displays results as ascending)
1923```
@@ -51,6 +55,11 @@ status AND down | extract "user=(?<user>.*?):" | count (*) group by user | sort
5155... | count user | sort by _count asc
5256```
5357
58+ ``` sql
59+ | parse " GET * " as url | count by url | order by _count
60+ | order by _count asc
61+ ```
62+
5463### Top 10 pages by page hits
5564
5665This example counts page hits by sourceHost, sorts them by page hits, and limits the results to the top 10.
You can’t perform that action at this time.
0 commit comments