Sorting

Follow

Yuvaraj M

• February 20, 2020 08:08

((_collector="AWS-SP-DEV" and _sourceCategory="http input"))
(_sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1" OR _sourceHost="/aws/lambda/dev-student-queue-publisher-v1" OR _sourceHost="/aws/lambda/dev-database-student-queue-v1" OR _sourceHost="/aws/lambda/dev-database-student-history-queue-v1")
| parse "'level': '*'" as level
| if (level matches "info", 1,0) as Info
| if (level matches "error",1,0) as Error
| where Info=1
| count (Info) group by _sourcehost


For the above above, i tried the result in Coloumn Chart by Sourcehost, However the sourcehost is not in the correct order as i have give in the query.

is there a way to display accordingly be sourcehost in sequence order

0

• 

  Rick Jury

  • February 20, 2020 20:33

  have you tried the sort operator?

   

  | sort _sourcehost asc

  0

  Comment actions Permalink
• 

  Yuvaraj M

  • February 21, 2020 04:28

  yes, that doesn't help...
  

  i wanted to be in the below order in chart format :
  
  1._sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1"

  2._sourceHost="/aws/lambda/dev-student-queue-publisher-v1"

  3. _sourceHost="/aws/lambda/dev-database-student-queue-v1"

  4. _sourceHost="/aws/lambda/dev-database-student-history-queue-v1")

   

  Is there a way to rename the sourcehost field?

  0

  Comment actions Permalink
• 

  Clayton Thompson

  • February 14, 2022 13:15

  if (_sourceHost="/aws/lambda/dev-c4c-student-event-publisher-v1", "1 c4c-event",

  if (_sourceHost="/aws/lambda/dev-student-queue-publisher-v1", "2 queue",

  if (_sourceHost="/aws/lambda/dev-database-student-queue-v1", "3 db-queue,

  "4 db-history-queue") ) ) as _sourcehost

  0

  Comment actions Permalink

Please sign in to leave a comment.