Sort the rows of the input table into order by one or more columns.
T | sort by strlen(country) asc, price desc
| sort by expression [
nulls first |
nulls last] [
- T: The table input to sort.
- expression: A scalar expression by which to sort. The type of the values must be numeric, date, time or string.
ascSort by into ascending order, low to high. The default is
desc, descending high to low.
nulls first(the default for
ascorder) will place the null values at the beginning and
nulls last(the default for
descorder) will place the null values at the end.
Traces | where ActivityId == "479671d99b7b" | sort by Timestamp asc nulls first
All rows in table Traces that have a specific
ActivityId, sorted by their timestamp. If
Timestamp column contains null values, those will appear at the first lines of the result.
In order to exclude null values from the result add a filter before the call to sort:
Traces | where ActivityId == "479671d99b7b" and isnotnull(Timestamp) | sort by Timestamp asc