Scalar functions

sort operator

Sort the rows of the dataset into an order by one or more columns.

Syntax

| sort by Expression [asc | desc] [, ...]

Arguments

nametypedescription
expressionexpressionA scalar expression by which to sort. The value type must be numeric, date, time or string.
ascstringSort by into ascending order, low to high.
descstringSort by into descending order, high to low.

Example

['http-logs']
| where method == 'GET'
| sort by method