https://community.splunk.com/t5/Splunk-Search/adding-up-of-two-rows/m-p/28402#M5622 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Addtotals">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Addtotals</A></P> Thu, 08 Aug 2013 09:20:23 GMT Ayn 2013-08-08T09:20:23Z https://community.splunk.com/t5/Splunk-Search/adding-up-of-two-rows/m-p/28401#M5621 <P>hi,</P> <P>when i run a following command it</P> <P>index="New" "Phase * ended" | table phase_0_ended,phase-1-ended,datetime </P> <P>it gives following output</P> <P>phase_0_ended phase_1_ended datetime<BR /> 1120 secs 1150 secs 12 jan 12:33:42<BR /> 1148 secs 1130 secs 12 jan 12:36:51 secs</P> <P>now i want to make another column which can add up phase_0_ended and phase_1_ended value of 1 row means(1120+1150) sec to give the result..</P> Mon, 28 Sep 2020 14:31:45 GMT https://community.splunk.com/t5/Splunk-Search/adding-up-of-two-rows/m-p/28401#M5621 harsh1734 2020-09-28T14:31:45Z https://community.splunk.com/t5/Splunk-Search/adding-up-of-two-rows/m-p/28402#M5622 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Addtotals">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Addtotals</A></P> Thu, 08 Aug 2013 09:20:23 GMT https://community.splunk.com/t5/Splunk-Search/adding-up-of-two-rows/m-p/28402#M5622 Ayn 2013-08-08T09:20:23Z