https://community.splunk.com/t5/Splunk-Search/splunk/m-p/540526#M152927 <P>append command may help..&nbsp; Query1 | eval Name="first"&nbsp; | append [|search query2| eval Name="second"]&nbsp;</P><P>index=_internal | stats avg(kbps) as avg, max(kbps) as max,sum(kbps) as total | eval Name="_internal"| append [search index=_audit| stats avg(kbps) as avg, max(kbps) as max,sum(kbps) as total | eval Name="_audit"] | table Name avg max total</P> Fri, 19 Feb 2021 13:16:39 GMT saravanan90 2021-02-19T13:16:39Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/540509#M152920 <P>I have two queries and i want to append those two queries and i need new column for separation<BR />for ex:<BR />i got below result from query 1<BR /><BR />total&nbsp; &nbsp; &nbsp;avg&nbsp; &nbsp; &nbsp; &nbsp;max<BR />10&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 15&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;16<BR /><BR /><BR />and i got below result from query 2<BR />total&nbsp; &nbsp; &nbsp;avg&nbsp; &nbsp; &nbsp; &nbsp;max<BR />51&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 50&nbsp; &nbsp; &nbsp; &nbsp; 19<BR /><BR /><BR />i want to append both queries and I want result like below<BR /><BR />Name&nbsp; &nbsp; &nbsp; &nbsp;total&nbsp; &nbsp;avg&nbsp; &nbsp; max<BR />first&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;10&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;15&nbsp; &nbsp; &nbsp; &nbsp;16<BR />second&nbsp; &nbsp; &nbsp;51&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;50&nbsp; &nbsp; &nbsp; &nbsp; 19</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>So I want new column with "Name"<BR /><BR />could anyone please help on this??</P> Fri, 19 Feb 2021 11:36:41 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/540509#M152920 vinod0313 2021-02-19T11:36:41Z https://community.splunk.com/t5/Splunk-Search/splunk/m-p/540526#M152927 <P>append command may help..&nbsp; Query1 | eval Name="first"&nbsp; | append [|search query2| eval Name="second"]&nbsp;</P><P>index=_internal | stats avg(kbps) as avg, max(kbps) as max,sum(kbps) as total | eval Name="_internal"| append [search index=_audit| stats avg(kbps) as avg, max(kbps) as max,sum(kbps) as total | eval Name="_audit"] | table Name avg max total</P> Fri, 19 Feb 2021 13:16:39 GMT https://community.splunk.com/t5/Splunk-Search/splunk/m-p/540526#M152927 saravanan90 2021-02-19T13:16:39Z