<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to add two rows to one? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-two-rows-to-one/m-p/486360#M136063</link>
    <description>&lt;P&gt;Try this!&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(your search)
|stats sum(count) as count by Fruit
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Thu, 26 Sep 2019 14:34:41 GMT</pubDate>
    <dc:creator>HiroshiSatoh</dc:creator>
    <dc:date>2019-09-26T14:34:41Z</dc:date>
    <item>
      <title>How to add two rows to one?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-two-rows-to-one/m-p/486359#M136062</link>
      <description>&lt;P&gt;I have 2 rows with same field name, how do I add the count of 2 rows  and display the result in one row. &lt;BR /&gt;
please find the example:&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Fruit    | A  | count&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;apple  |3    |  3&lt;BR /&gt;
apple  |2    |  2&lt;BR /&gt;
mango|1   | 1&lt;BR /&gt;
mango|2   |2&lt;/STRONG&gt; &lt;/P&gt;

&lt;P&gt;To look something like this:&lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;Fruit      | count&lt;BR /&gt;
apple    |  5&lt;BR /&gt;
mango  | 3&lt;/STRONG&gt;&lt;/P&gt;

&lt;P&gt;Thank you.&lt;/P&gt;</description>
      <pubDate>Thu, 26 Sep 2019 13:33:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-add-two-rows-to-one/m-p/486359#M136062</guid>
      <dc:creator>mmengu416</dc:creator>
      <dc:date>2019-09-26T13:33:04Z</dc:date>
    </item>
    <item>
      <title>Re: How to add two rows to one?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-two-rows-to-one/m-p/486360#M136063</link>
      <description>&lt;P&gt;Try this!&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;(your search)
|stats sum(count) as count by Fruit
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 26 Sep 2019 14:34:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-add-two-rows-to-one/m-p/486360#M136063</guid>
      <dc:creator>HiroshiSatoh</dc:creator>
      <dc:date>2019-09-26T14:34:41Z</dc:date>
    </item>
  </channel>
</rss>

