https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614883#M50440 <P>It looks like you want the value from the next event not the previous (although this does represent the previous in time looking at your data).</P><LI-CODE lang="markup">| reverse | streamstats window=1 current=f values(value) as previousValue | reverse</LI-CODE> Wed, 28 Sep 2022 07:22:37 GMT ITWhisperer 2022-09-28T07:22:37Z https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614880#M50438 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="supraja_0-1664349228799.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/21720iC1444DD69964D5DD/image-size/medium?v=v2&amp;px=400" role="button" title="supraja_0-1664349228799.png" alt="supraja_0-1664349228799.png" /></span></P><P>how to bring previous value by using value ?? could someone help me please.</P> Wed, 28 Sep 2022 07:15:49 GMT https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614880#M50438 supraja 2022-09-28T07:15:49Z https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614883#M50440 <P>It looks like you want the value from the next event not the previous (although this does represent the previous in time looking at your data).</P><LI-CODE lang="markup">| reverse | streamstats window=1 current=f values(value) as previousValue | reverse</LI-CODE> Wed, 28 Sep 2022 07:22:37 GMT https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614883#M50440 ITWhisperer 2022-09-28T07:22:37Z https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614910#M50446 <P>this solution is not working , we need to take considertation of time as well .. could you please provide any other solution</P> Wed, 28 Sep 2022 08:48:43 GMT https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614910#M50446 supraja 2022-09-28T08:48:43Z https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614915#M50448 <LI-CODE lang="markup">| sort 0 _time | streamstats window=1 current=f values(value) as previousValue | reverse</LI-CODE> Wed, 28 Sep 2022 08:59:48 GMT https://community.splunk.com/t5/Dashboards-Visualizations/comparing-the-filed-value-with-previous-value/m-p/614915#M50448 ITWhisperer 2022-09-28T08:59:48Z