Splunk interview question

String sorting, time interval sorting