https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527676#M148969 <LI-CODE lang="markup">| eval trackingid=coalesce(trackingid,trackingId)</LI-CODE> Tue, 03 Nov 2020 09:29:11 GMT ITWhisperer 2020-11-03T09:29:11Z https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527610#M148949 <P>I am trying to get a distinct count of tacking id from all of our production indexes. The issue I am running into is that for internal indexes my field of interest is named "trackingid" and for external indexes the field is named "trackingId".&nbsp;</P><P>I have tried several things and can only get values for either internal or external, and or both in separate columns. I cannot get both fields renamed as "tid". Which would then be split by region based on host.</P> Mon, 02 Nov 2020 23:20:55 GMT https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527610#M148949 heamik 2020-11-02T23:20:55Z https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527676#M148969 <LI-CODE lang="markup">| eval trackingid=coalesce(trackingid,trackingId)</LI-CODE> Tue, 03 Nov 2020 09:29:11 GMT https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527676#M148969 ITWhisperer 2020-11-03T09:29:11Z https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527746#M148990 <P>Thank you so much!!! That solved the problem perfectly!</P> Tue, 03 Nov 2020 14:50:42 GMT https://community.splunk.com/t5/Splunk-Search/Distinct-Count-of-Field1-and-field2/m-p/527746#M148990 heamik 2020-11-03T14:50:42Z