https://community.splunk.com/t5/Getting-Data-In/OR-in-Pivot-command/m-p/433233#M75738 <P>Have you tried <CODE>FILTER product in ("IOS","WLC")</CODE>?</P> Thu, 12 Jul 2018 10:14:44 GMT FrankVl 2018-07-12T10:14:44Z https://community.splunk.com/t5/Getting-Data-In/OR-in-Pivot-command/m-p/433232#M75737 <P>Hi Team,</P> <P>How do we do "OR" in pivot command? <BR /> I wanted to have a result with either product ="IOS" OR product ="WLC"</P> <P>Current search: Take note of FILTER product is "IOS"<BR /> | pivot Cisco_IOS_Event Cisco_IOS_Event count(Cisco_IOS_Event) AS "Count of Event" SPLITROW _time AS "_time" PERIOD auto SPLITCOL mnemonic FILTER product is "IOS" SORT 0 _time NUMCOLS 10</P> <P>I tried FILTER product is "IOS" OR product is "WLC" but did not work.</P> <P>What should I done differently? Thanks in advance.</P> Tue, 29 Sep 2020 20:23:37 GMT https://community.splunk.com/t5/Getting-Data-In/OR-in-Pivot-command/m-p/433232#M75737 jaracan 2020-09-29T20:23:37Z https://community.splunk.com/t5/Getting-Data-In/OR-in-Pivot-command/m-p/433233#M75738 <P>Have you tried <CODE>FILTER product in ("IOS","WLC")</CODE>?</P> Thu, 12 Jul 2018 10:14:44 GMT https://community.splunk.com/t5/Getting-Data-In/OR-in-Pivot-command/m-p/433233#M75738 FrankVl 2018-07-12T10:14:44Z