ES|QL SORT command

The SORT processing command sorts a table on one or more columns.

SORT column1 [ASC/DESC][NULLS FIRST/NULLS LAST][, ..., columnN [ASC/DESC][NULLS FIRST/NULLS LAST]]
		

columnX

The column to sort on.

The SORT processing command sorts a table on one or more columns.

The default sort order is ascending. Use ASC or DESC to specify an explicit sort order.

Two rows with the same sort key are considered equal. You can provide additional sort expressions to act as tie breakers.

Sorting on multivalued columns uses the lowest value when sorting ascending and the highest value when sorting descending.

By default, null values are treated as being larger than any other value. With an ascending sort order, null values are sorted last, and with a descending sort order, null values are sorted first. You can change that by providing NULLS FIRST or NULLS LAST.

The following examples show how to control sort order, tie-breaking, and null placement.

FROM employees
| KEEP first_name, last_name, height
| SORT height
		

FROM employees
| KEEP first_name, last_name, height
| SORT height DESC
		

FROM employees
| KEEP first_name, last_name, height
| SORT height DESC, first_name ASC
		

FROM employees
| KEEP first_name, last_name, height
| SORT first_name ASC NULLS FIRST