I'm currently querying
source="log" | stats list by Id
Which gives me nicely grouped data.
However I would like the content of those groups sorted by Timestamp
.
That is to say I do not want the groups themselves sorted but the records inside each group.
Right now they will sorted in reverse-chronological/descending order of timestamp (_time field). Do you want to sort in ascending/chronological order? If yes, try like this
source="log" | reverse | stats list by Id
Right now they will sorted in reverse-chronological/descending order of timestamp (_time field). Do you want to sort in ascending/chronological order? If yes, try like this
source="log" | reverse | stats list by Id