topic Re: Merge two rows based on common field value in Dashboards & Visualizations https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486450#M33602 <P>I typically do this:</P> <PRE><CODE>... | stats list(*) AS * BY COMMONID </CODE></PRE> <P>Just in case there are some duplicated lines.</P> Fri, 06 Mar 2020 16:31:13 GMT woodcock 2020-03-06T16:31:13Z Merge two rows based on common field value https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486447#M33599 <P>I've a table like below and I want to merge two rows based on the COMMONID</P> <PRE><CODE>1. JBID JOBTYPE START_TIME END_TIME COMMONID 2. 2020-03-10T06:30:00 2020-03-10T08:30:00 abc 3. 6398 Medium abc 4. 5649 Medium def 5. 2020-03-10T08:30:00 2020-03-10T10:30:00 def 6. 5649 Medium ghi 7. 2020-03-20T08:30:00 2020-03-20T10:30:00 ghi 8. 2020-03-11T08:30:00 2020-03-11T10:30:00 jkl 9. 6383 Medium jkl 10. 7070 Medium mno 11. 2020-03-10T08:30:00 2020-03-10T10:30:00 mno 12. 11690 Medium pqr 13. 2020-03-12T06:30:00 2020-03-12T08:30:00 pqr 14. 2020-03-19T06:30:00 2020-03-19T08:30:00 stu 15. 6398 Medium stu 16. 6398 Medium vwx 17. 2020-03-10T06:30:00 2020-03-10T08:30:00 vwx </CODE></PRE> <P>The resulting table should look like below</P> <PRE><CODE>1. JBID JOBTYPE START_TIME END_TIME COMMONID 2. 6398 Medium 2020-03-10T06:30:00 2020-03-10T08:30:00 abc 3. 5649 Medium 2020-03-10T08:30:00 2020-03-10T10:30:00 def 4. 5649 Medium 2020-03-20T08:30:00 2020-03-20T10:30:00 ghi 5. 6383 Medium 2020-03-11T08:30:00 2020-03-11T10:30:00 jkl 6. 7070 Medium 2020-03-10T08:30:00 2020-03-10T10:30:00 mno 7. 11690 Medium 2020-03-12T06:30:00 2020-03-12T08:30:00 pqr 8. 6398 Medium 2020-03-19T06:30:00 2020-03-19T08:30:00 stu 9. 6398 Medium 2020-03-10T06:30:00 2020-03-10T08:30:00 vwx </CODE></PRE> <P>How do I achieve this?</P> Tue, 23 Jun 2020 22:12:39 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486447#M33599 charan986 2020-06-23T22:12:39Z Re: Merge two rows based on common field value https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486448#M33600 <P>hi @charan986 </P> <P>You can do this using stats command:</P> <PRE><CODE>&lt;base search&gt;| stats first(*) as * by COMMONID </CODE></PRE> Fri, 06 Mar 2020 13:58:50 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486448#M33600 manjunathmeti 2020-03-06T13:58:50Z Re: Merge two rows based on common field value https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486449#M33601 <PRE><CODE>.... | selfjoin COMMONID </CODE></PRE> Fri, 06 Mar 2020 14:50:55 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486449#M33601 to4kawa 2020-03-06T14:50:55Z Re: Merge two rows based on common field value https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486450#M33602 <P>I typically do this:</P> <PRE><CODE>... | stats list(*) AS * BY COMMONID </CODE></PRE> <P>Just in case there are some duplicated lines.</P> Fri, 06 Mar 2020 16:31:13 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486450#M33602 woodcock 2020-03-06T16:31:13Z Re: Merge two rows based on common field value https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486451#M33603 <P>Thanks, it worked <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 06 Mar 2020 17:20:11 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Merge-two-rows-based-on-common-field-value/m-p/486451#M33603 charan986 2020-03-06T17:20:11Z