https://community.splunk.com/t5/Splunk-Search/Add-2-columns-in-a-table-on-applied-condition/m-p/210988#M61702 <PRE><CODE>your Base query to generate place , mag, depth | eval mag=if(place="7km W of Cobb, California" OR place="1km SE of Loma Linda, California", mag+depth, mag) | eval depth=if(place="7km W of Cobb, California" OR place="1km SE of Loma Linda, California", 0, depth) | table place, mag, depth </CODE></PRE> Sat, 05 Nov 2016 17:00:20 GMT gokadroid 2016-11-05T17:00:20Z https://community.splunk.com/t5/Splunk-Search/Add-2-columns-in-a-table-on-applied-condition/m-p/210987#M61701 <P>I have 3 columns in a table as below. <BR /> I need to sum two colums(mag and depth) if place="7km W of Cobb,california" or "1km se of loma linda,california".<BR /> show the result in mag and make depth as 0 column as 0 on applied condition(place).<span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2106iDAD5C2C1BD4BBEBA/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>my result should be as follows:<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/2107i66B3490D1E319874/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span><BR /> Please help me to make a query for my condition.</P> Sat, 05 Nov 2016 11:38:11 GMT https://community.splunk.com/t5/Splunk-Search/Add-2-columns-in-a-table-on-applied-condition/m-p/210987#M61701 nivethainspire_ 2016-11-05T11:38:11Z https://community.splunk.com/t5/Splunk-Search/Add-2-columns-in-a-table-on-applied-condition/m-p/210988#M61702 <PRE><CODE>your Base query to generate place , mag, depth | eval mag=if(place="7km W of Cobb, California" OR place="1km SE of Loma Linda, California", mag+depth, mag) | eval depth=if(place="7km W of Cobb, California" OR place="1km SE of Loma Linda, California", 0, depth) | table place, mag, depth </CODE></PRE> Sat, 05 Nov 2016 17:00:20 GMT https://community.splunk.com/t5/Splunk-Search/Add-2-columns-in-a-table-on-applied-condition/m-p/210988#M61702 gokadroid 2016-11-05T17:00:20Z