https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566314#M197366 <P>Check the <FONT face="courier new,courier">addcoltotals</FONT> command.</P> Wed, 08 Sep 2021 14:31:28 GMT richgalloway 2021-09-08T14:31:28Z https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566313#M197365 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="wasifchowdhury_0-1631111314504.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15910i133C4F09EFE35B29/image-size/medium?v=v2&amp;px=400" role="button" title="wasifchowdhury_0-1631111314504.png" alt="wasifchowdhury_0-1631111314504.png" /></span></P><P>How do I add the two values from stats which I get from these query?</P> Wed, 08 Sep 2021 14:30:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566313#M197365 wasifchowdhury 2021-09-08T14:30:15Z https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566314#M197366 <P>Check the <FONT face="courier new,courier">addcoltotals</FONT> command.</P> Wed, 08 Sep 2021 14:31:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566314#M197366 richgalloway 2021-09-08T14:31:28Z https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566316#M197367 <P>where should I use the&nbsp;<SPAN>addcoltotals command? After |stats max?</SPAN></P> Wed, 08 Sep 2021 14:33:07 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566316#M197367 wasifchowdhury 2021-09-08T14:33:07Z https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566324#M197369 <P>Yes.&nbsp; The columns have to exist before <FONT face="courier new,courier">addcoltotals</FONT> can add them.</P> Wed, 08 Sep 2021 15:05:49 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Add-two-results/m-p/566324#M197369 richgalloway 2021-09-08T15:05:49Z