Logscape Support

Members Login
Username 
 
Password 
    Remember Me  
Logscape Support -> logscape -> Search Syntax to control the sort order of the rows in a chart(table) to sort by the "Count" column
Post Info TOPIC: Search Syntax to control the sort order of the rows in a chart(table) to sort by the "Count" column
dan-c-it


Member

Status: Offline
Posts: 7
Date:
Search Syntax to control the sort order of the rows in a chart(table) to sort by the "Count" column
Permalink  
 

I am using the following search to produce the following chart(table)

* |   _tag.include(syslog) IPAddr.include(192.168.0.102) urldomain.count(urldomain,)  chart(table) buckets(1)

 

Is there any syntax that I can add to this search string to cause the chart(table) output to be sorted by the second column ("Count") in descending order instead of the output automatically being sorted by the first column ("urldomain") in ascending order?

 

 Table-annotated.PNG|<<12>>|

  
(null)134
31.media.tumblr.com23
33.media.tumblr.com73
36.media.tumblr.com23
38.media.tumblr.com90
40.media.tumblr.com56
41.media.tumblr.com54
54.82.61.1601
a.disquscdn.com4
a1.mzstatic.com6
a2.mzstatic.com6
a3.mzstatic.com6
a4.mzstatic.com8
a5.mzstatic.com7
aa-nb.mgid.com1
ads.intergi.com2
ads.lfstmedia.com6
ads.mopub.com10
ads.rubiconproject.com1
ajax.googleapis.com2
api.preguntados.com11
api.tumblr.com118
api.vungle.com4
assets.tumblr.com1
b.scorecardresearch.com2
bannerfarm.ace.advertising.com1
c1.wikicdn.com3
cdn-lb.vungle.com1
cdn.assets.craveonline.com2
cdn.crowdignite.com1
cdn.lfstmedia.com12
cdn.springboardplatform.com2
cdn.syndication.twitter.com2
cdn1.crowdignite.com4
cmap.uac.ace.advertising.com1
cms.springboardplatform.com1
configuration.apple.com4
connect.facebook.net1
counter.dt07.net1
counter.mgid.com1
data.flurry.com19
delivery.switchadhub.com4
edge.quantserve.com1
edge.sharethis.com1
EVSecure-ocsp.verisign.com1
fonts.googleapis.com3
fonts.gstatic.com4
graph.facebook.com13
gum.criteo.com1
head.exposalary.com2
images.pocketgamer.co.uk5
imgn.mgid.com4
init-p01md.apple.com6
init-p01st.push.apple.com8
init.ess.apple.com6
Showing 1 to 55 of 103 entries
|<<12>>|


Attachments
__________________
Nathen


Member

Status: Offline
Posts: 23
Date:
Permalink  
 

Hi Dan,

Unfortunately at the moment this functionality is not present in Logscape, however, Charts functionality in general are being looked at in an upcoming release so it is possible this will be added then.

Thanks,
Nathen

__________________
dan-c-it


Member

Status: Offline
Posts: 7
Date:
Permalink  
 

Thanks so much for responding. Any idea when the next release might be? Is there a consistent release schedule or do releases just occur whenever new fixes / features are completed?

P.S.
It would be VERY helpful to me if this feature was added...

__________________
neilson9


Senior Member

Status: Offline
Posts: 100
Date:
Permalink  
 

Hi Dan,

This is scheduled for 2.5.2, its a fairly simple fix.

We normally target point releases every 4-6 weeks. 2.5.1 was just released.

Cheers Neil.

__________________
neilson9


Senior Member

Status: Offline
Posts: 100
Date:
Permalink  
 

Dan,
it looks like 2.5.2 will be available early next week. 2.5.1 has an issue which means we are providing an incremental update and fix. it will include a sort(1,asc) function which allows you to choose the column and sort and whether it is ascending or descending.

Regards,
Neil.

__________________
dan-c-it


Member

Status: Offline
Posts: 7
Date:
Permalink  
 

That is EXCELLENT news!! Thanks for the your responses and thanks for the feature enhancement!!! ....(Just in time for my implementation)

__________________
dan-c-it


Member

Status: Offline
Posts: 7
Date:
Permalink  
 

Will the new sort(1,asc) function support multi-column sorts? Will it work to sort replay events also?

Is it possible to do a multi-column groupby without concatenating the columns together into one column, such that I could have "IPAddress" and "urldomain" and "Count" as 3 seperate columns instead of concatenating IPAddress+urldomain and then be able to sort (1, asc, 3, desc)?

__________________
neilson9


Senior Member

Status: Offline
Posts: 100
Date:
Permalink  
 

Hi Dan,
Its something that was in 1.3.1 but dropped out with 2+ (oops!)

The release will support sorting by 1 or 2 columns and only on the chart(table)
i.e.
sort(1,asc)
OR
sort(2,asc,1,desc)

We could look at hooking it in replay events but its need a bit more rationalisation wrt workspace etc....

Regards,
Neil.


__________________
dan-c-it


Member

Status: Offline
Posts: 7
Date:
Permalink  
 

Okay. Thanks for the reply!

__________________
neilson9


Senior Member

Status: Offline
Posts: 100
Date:
Permalink  
 

Hi Dan,
2.5.2 is now available, and contains the sort() functionality as discussed. Docs will be updated tomorrow.

logscape.github.io/release-notes-2.5.2.html

i.e. sort(1,asc)
sort(1,asc,2,desc)

Regards,
Neil.

__________________
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.
Logscape Support -> logscape -> Search Syntax to control the sort order of the rows in a chart(table) to sort by the "Count" column


Create your own FREE Forum
Report Abuse 		Powered by ActiveBoard