Reverses the order of the results.
Note: the reverse command does not affect which events are returned by the search, only the order in which they are displayed. For the CLI, this includes any default or explicit maxout setting.
Reverse on very large result sets, which means sets with millions of results or more, requires large amounts of temporary storage, I/O, and time.
Reverse the order of a result set.
... | reverse
Have questions? Visit Splunk Answers and see what questions and answers the Splunk community has using the reverse command.
This documentation applies to the following versions of Splunk Cloud™: 6.6.3, 7.0.0, 7.0.2, 7.0.5, 7.0.3, 7.0.8, 7.0.11, 7.1.3, 7.1.6, 7.2.3, 7.2.4, 7.2.6, 7.2.7