topic How to get two different field values In a query in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556839#M158159 <P>Hi Team</P><P>I am looking to get two different field values in a single query in Splunk, example, I have two different country codes and would like to get both their values&nbsp;</P><P>Request.countrycode=EU</P><P>Request.country=SW</P><P>“Or” command is not working for this, any suggestions team ?</P><P>&nbsp;</P> Wed, 23 Jun 2021 09:30:28 GMT aaa2324 2021-06-23T09:30:28Z How to get two different field values In a query https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556839#M158159 <P>Hi Team</P><P>I am looking to get two different field values in a single query in Splunk, example, I have two different country codes and would like to get both their values&nbsp;</P><P>Request.countrycode=EU</P><P>Request.country=SW</P><P>“Or” command is not working for this, any suggestions team ?</P><P>&nbsp;</P> Wed, 23 Jun 2021 09:30:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556839#M158159 aaa2324 2021-06-23T09:30:28Z Re: How to get two different field values In a query https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556843#M158160 <P>Are you using "OR" - this has to be all in caps for it to work.</P><LI-CODE lang="markup">Request.countrycode=EU OR Request.country=SW</LI-CODE> Wed, 23 Jun 2021 09:36:39 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556843#M158160 ITWhisperer 2021-06-23T09:36:39Z Re: How to get two different field values In a query https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556857#M158163 <P>Thanks, but how to get the stats count of these two values?</P><P>Stats count by Request.countrycode, Request.country</P><P>is not returning any values&nbsp;</P><P>&nbsp;</P> Wed, 23 Jun 2021 10:44:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556857#M158163 aaa2324 2021-06-23T10:44:07Z Re: How to get two different field values In a query https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556858#M158164 <P>Can you share some anonymised sample events and the current search you are working with, and some idea of what you are trying to get out of it?</P> Wed, 23 Jun 2021 10:47:59 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-two-different-field-values-In-a-query/m-p/556858#M158164 ITWhisperer 2021-06-23T10:47:59Z