https://community.splunk.com/t5/Splunk-Search/How-to-display-two-queries-output-as-single-output/m-p/479757#M134464 <PRE><CODE>index = * sourcetype=test earliest=@d latest=now | rename Instance_state as status | stats count(eval(status="running")) AS Running, count(eval(status="down")) AS Down,count(eval(status="crashed")) AS Crashed, count as INSTANCES, dc(Microservices) as APP, dc(Space) as SPACE, dc(Org) as ORG | table ORG SPACE APP INSTANCES Running Down Crashed </CODE></PRE> Thu, 23 Apr 2020 12:39:09 GMT richgalloway 2020-04-23T12:39:09Z https://community.splunk.com/t5/Splunk-Search/How-to-display-two-queries-output-as-single-output/m-p/479756#M134463 <P>Hi Team,<BR /> How to display two queries output as single output. Please help. <BR /> index = * sourcetype=test earliest=@d latest=now | eventstats count as INSTANCES| dedup Microservices | eventstats count as APP | dedup Space | eventstats count as SPACE | dedup Org | eventstats count as ORG | table ORG SPACE APP INSTANCES | head 1</P> <P>index = * sourcetype=test earliest=@d latest=now |table Instance_state | rename Instance_state as status | stats count(eval(status="running")) AS Running, count(eval(status="down")) AS Down,count(eval(status="crashed")) AS Crashed</P> <P>Expected Output <BR /> ORG SPACE APP INSTANCES Running Down Crashed<BR /> 3 37 386 820 627 103 90</P> Wed, 30 Sep 2020 05:05:08 GMT https://community.splunk.com/t5/Splunk-Search/How-to-display-two-queries-output-as-single-output/m-p/479756#M134463 thomas6m 2020-09-30T05:05:08Z https://community.splunk.com/t5/Splunk-Search/How-to-display-two-queries-output-as-single-output/m-p/479757#M134464 <PRE><CODE>index = * sourcetype=test earliest=@d latest=now | rename Instance_state as status | stats count(eval(status="running")) AS Running, count(eval(status="down")) AS Down,count(eval(status="crashed")) AS Crashed, count as INSTANCES, dc(Microservices) as APP, dc(Space) as SPACE, dc(Org) as ORG | table ORG SPACE APP INSTANCES Running Down Crashed </CODE></PRE> Thu, 23 Apr 2020 12:39:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-display-two-queries-output-as-single-output/m-p/479757#M134464 richgalloway 2020-04-23T12:39:09Z