With Multi-Group Summary table queries, it is possible to sort each group using a separate sorting criteria. For example, Label (A-Z), Label (Z-A), Value (Descending), Value (Ascending), or Oldest first.
When sorting a group by Value (Descending or Ascending), any group below the group sorted by value appears to follow the parent group sorting criteria. For example, if you build a Multi-Group Summary table and choose Event ID for the parent group and sort by value (Descending), and then Threat Name for the child group and sort this by value (Ascending), you might expect to see results like this:
| EventID->Threat Name |
Number of
Threat Events |
| 1092 |
2,799 |
| Threat name B |
1 |
| Threat name D |
13 |
| Threat name A |
32 |
| Threat name C |
2,753 |
But instead, you see results like this:
| EventID->Threat Name |
Number of
Threat Events |
| 1092 |
2,799 |
| Threat name C |
2,753 |
| Threat name A |
32 |
| Threat name D |
13 |
| Threat name B |
1 |
