https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141812#M39312 <P>You can use eventstats:</P> <P>index=_internal | eventstats max(date_second) AS MAX min(date_second) as MIN | table date_second,MAX,MIN</P> Mon, 28 Sep 2020 18:53:32 GMT mzorzi 2020-09-28T18:53:32Z https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141810#M39310 <P>Hello,<BR /> I have a search that tables certain values from my data fields, although i wish to create a new field on all events called Maximum that gets the latest value of a field called max and another called min</P> Wed, 11 Feb 2015 12:50:33 GMT https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141810#M39310 markthompson 2015-02-11T12:50:33Z https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141811#M39311 <P>Could you provide the search and if possible some sample data?</P> Wed, 11 Feb 2015 12:59:18 GMT https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141811#M39311 MuS 2015-02-11T12:59:18Z https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141812#M39312 <P>You can use eventstats:</P> <P>index=_internal | eventstats max(date_second) AS MAX min(date_second) as MIN | table date_second,MAX,MIN</P> Mon, 28 Sep 2020 18:53:32 GMT https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141812#M39312 mzorzi 2020-09-28T18:53:32Z https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141813#M39313 <P>Hi mzorzi,</P> <P>Thanks for your response.</P> <P>I used eventstats but I also wanted to get values from the search and table them as well.<BR /> Do you know how?</P> Wed, 11 Feb 2015 13:09:36 GMT https://community.splunk.com/t5/Splunk-Search/Using-subsearches-to-get-highest-value/m-p/141813#M39313 markthompson 2015-02-11T13:09:36Z