sort
Sorts events.
Synopsis
sort [--stable] <field> [<asc>|<desc>] [<nulls-first>|<nulls-last>]
Description
Sorts events by a provided field.
--stable
Preserve the relative order of events that cannot be sorted because the provided fields resolve to the same value.
<field>
The name of the field to sort by.
<asc>|<desc>
Specifies the sort order.
Defaults to asc
.
<nulls-first>|<nulls-last>
Specifies how to order null values.
Defaults to nulls-last
.
Examples
Sort by the timestamp
field in ascending order.
sort timestamp
Sort by the timestamp
field in descending order.
sort timestamp desc
Arrange by field foo
and put null values first:
sort foo nulls-first
Arrange by field foo
in descending order and put null values first:
sort foo desc nulls-first