sort

Learn how to Sort the rows of the dataset into an order by one or more columns.

Sorts the rows of the dataset into an order by one or more columns.

Syntax

| sort by Expression [asc | desc] [, ...]

Arguments

name	type	description
expression	expression	A scalar expression by which to sort. The value type must be numeric, date, time or string.
asc	string	Sort by into ascending order, low to high.
desc	string	Sort by into descending order, high to low.

Examples

['sample-http-logs']
| where method == 'GET'
| sort by method

Run in Playground

['sample-http-logs']
| sort by _time asc, ['geo.country'] desc 

Run in Playground

['sample-http-logs']
| sort by _time desc

Run in Playground