https://community.splunk.com/t5/Splunk-Search/Merging-rows-with-same-values/m-p/223312#M188249 <P>Try something like this</P> <PRE><CODE>your current search with first output | stats list(*) as * by StorageArray_serialNumber, TotalPorts </CODE></PRE> Mon, 14 Sep 2015 13:58:15 GMT somesoni2 2015-09-14T13:58:15Z https://community.splunk.com/t5/Splunk-Search/Merging-rows-with-same-values/m-p/223311#M188248 <P>Hi Guys,</P> <P>Need help on merging data. i have two columns ( first and second) which has the same value but instead of showing two different lines, i need to show to only one value for these columns while the 3rd and 4th column remains as individual rows. Please let me know how to resolve this.</P> <PRE><CODE>StorageArray_serialNumber TotalPorts LinkStatusType StorageArray_Port_topology 92213279 16 8 Link Failure 92213279 16 8 LinkUp(F_Port Connected) </CODE></PRE> <P>My desired output.</P> <PRE><CODE>StorageArray_serialNumber TotalPorts StorageArray_Port_topology LinkStatusType Link Failure 8 92213279 16 ----------------------------------------------------------- LinkUp(F_Port Connected) 8 ---------------------------------------------------------------- </CODE></PRE> Mon, 14 Sep 2015 06:15:49 GMT https://community.splunk.com/t5/Splunk-Search/Merging-rows-with-same-values/m-p/223311#M188248 keishamtcs 2015-09-14T06:15:49Z https://community.splunk.com/t5/Splunk-Search/Merging-rows-with-same-values/m-p/223312#M188249 <P>Try something like this</P> <PRE><CODE>your current search with first output | stats list(*) as * by StorageArray_serialNumber, TotalPorts </CODE></PRE> Mon, 14 Sep 2015 13:58:15 GMT https://community.splunk.com/t5/Splunk-Search/Merging-rows-with-same-values/m-p/223312#M188249 somesoni2 2015-09-14T13:58:15Z