https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24247#M4410 <P>eval command is useful to combine filed. Can you try following command and confirm if this work for your case?</P> <P>... | eval same_name=mvappend(field1, field2)</P> Wed, 08 Aug 2012 23:51:17 GMT Takajian 2012-08-08T23:51:17Z https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24246#M4409 <P>I have two field names from different sourcetype with the desired value that I want to put in a table with the same name how do i assign the same name to both fields?</P> Thu, 02 Aug 2012 16:18:23 GMT https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24246#M4409 hartfoml 2012-08-02T16:18:23Z https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24247#M4410 <P>eval command is useful to combine filed. Can you try following command and confirm if this work for your case?</P> <P>... | eval same_name=mvappend(field1, field2)</P> Wed, 08 Aug 2012 23:51:17 GMT https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24247#M4410 Takajian 2012-08-08T23:51:17Z https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24248#M4411 <P>For different sourcetypes you can use <CODE>eval name = coalesce(field1, field2)</CODE>and combining different field names to single field you use the above mentioned by Takajian <CODE>eval name = mvappend(field1, field2, ...)</CODE>it can combine multiple fields to single.</P> Thu, 03 Nov 2016 09:56:38 GMT https://community.splunk.com/t5/Splunk-Search/convert-two-values-same-name/m-p/24248#M4411 kamaleshwarn 2016-11-03T09:56:38Z