<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to club and display the results of two queries in a single dashboard in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466253#M131293</link>
    <description>&lt;P&gt;@sudeep5689, I am converting my comment as Answer. Please accept this if it helps.&lt;/P&gt;</description>
    <pubDate>Fri, 29 May 2020 10:09:22 GMT</pubDate>
    <dc:creator>493669</dc:creator>
    <dc:date>2020-05-29T10:09:22Z</dc:date>
    <item>
      <title>How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466242#M131282</link>
      <description>&lt;P&gt;Hi i am having two search queries with a difference of only the time range. I want to show the results of both the queries in a single dashboard. I s there a way to do it&lt;/P&gt;</description>
      <pubDate>Mon, 08 Jun 2020 19:28:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466242#M131282</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-06-08T19:28:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466243#M131283</link>
      <description>&lt;P&gt;You can create two separate panel and run each panel query on separate timerange in single dashboard.&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 08:19:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466243#M131283</guid>
      <dc:creator>493669</dc:creator>
      <dc:date>2020-05-28T08:19:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466244#M131284</link>
      <description>&lt;P&gt;i want the results in same panel&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 08:33:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466244#M131284</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-28T08:33:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466245#M131285</link>
      <description>&lt;P&gt;you can use earliest and latest within your query to run on separate timerange like below example-&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=abc earliest=-1d@d latest=now() |&amp;lt;your calculation&amp;gt;|append [search index=abc earliest=-5d@d latest=now()]
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 28 May 2020 08:37:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466245#M131285</guid>
      <dc:creator>493669</dc:creator>
      <dc:date>2020-05-28T08:37:59Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466246#M131286</link>
      <description>&lt;P&gt;Ok&lt;BR /&gt;
 Can we show the results as separate rows using this combined search. i mean month wise&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 08:39:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466246#M131286</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-28T08:39:58Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466247#M131287</link>
      <description>&lt;P&gt;like count of events i need to show on a monthly basis&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 08:40:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466247#M131287</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-28T08:40:54Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466248#M131288</link>
      <description>&lt;P&gt;you can show count on a monthly basis using single query . Is there any other reason for running two query?&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 09:23:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466248#M131288</guid>
      <dc:creator>493669</dc:creator>
      <dc:date>2020-05-28T09:23:17Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466249#M131289</link>
      <description>&lt;P&gt;yes need to show comparison across months for count basis.&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 09:33:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466249#M131289</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-28T09:33:47Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466250#M131290</link>
      <description>&lt;P&gt;in a single query using append right or anyother way you are hinting at&lt;/P&gt;</description>
      <pubDate>Thu, 28 May 2020 09:39:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466250#M131290</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-28T09:39:46Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466251#M131291</link>
      <description>&lt;P&gt;Ideally splunk has created two fields - &lt;CODE&gt;date_month&lt;/CODE&gt; and &lt;CODE&gt;date_year&lt;/CODE&gt;. If these fields are present then you can use below stats command-&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;...| stats count by date_month, date_year
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 28 May 2020 10:01:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466251#M131291</guid>
      <dc:creator>493669</dc:creator>
      <dc:date>2020-05-28T10:01:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466252#M131292</link>
      <description>&lt;P&gt;The solution provided worked out&lt;/P&gt;</description>
      <pubDate>Fri, 29 May 2020 10:06:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466252#M131292</guid>
      <dc:creator>sudeep5689</dc:creator>
      <dc:date>2020-05-29T10:06:33Z</dc:date>
    </item>
    <item>
      <title>Re: How to club and display the results of two queries in a single dashboard</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466253#M131293</link>
      <description>&lt;P&gt;@sudeep5689, I am converting my comment as Answer. Please accept this if it helps.&lt;/P&gt;</description>
      <pubDate>Fri, 29 May 2020 10:09:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-club-and-display-the-results-of-two-queries-in-a-single/m-p/466253#M131293</guid>
      <dc:creator>493669</dc:creator>
      <dc:date>2020-05-29T10:09:22Z</dc:date>
    </item>
  </channel>
</rss>

