|
In 4.2.x, instead of June, July, August, September, the data listed as August, July, June, September. Data is displayed by alphabetic order of the month name. Data is displayed by alphabetic order of the month name when it should be logical.
|
|
This is a bug. Bug#SPL-43691 |
|
This is not a bug. If you do want to sort by month, then you can place the month number in a field and sort on that, e.g.: |
|
I would change something slightly with gkanapathy's answer. Prefix the date_numeric_month with an underscore to make it hidden and add the month name within the query. In this example I am getting the count of user_ids per month: ... | eval _date_numeric_month=strftime(_time,"%m") | stats count(user_id) by _date_numeric_month, date_month | sort _date_numeric_month |
