Splunk Interview Question

String sorting, time interval sorting