https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244201#M72706 <P>Can we have to some real sample output? What type of values does the field topic contains?</P> Wed, 12 Oct 2016 17:17:11 GMT somesoni2 2016-10-12T17:17:11Z https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244199#M72704 <P>I have 4 unique and standard values under one field extraction <STRONG>topic</STRONG>. I want to combine them into two values and use the output for my tokens in dashboard panels.</P> <PRE><CODE>topic | count A | 10 Aa | 10 B | 5 bb | 5 </CODE></PRE> <P>Required output</P> <PRE><CODE>topic | count A | 20 B | 10 </CODE></PRE> Wed, 12 Oct 2016 16:39:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244199#M72704 shivarpith 2016-10-12T16:39:27Z https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244200#M72705 <P>Try this</P> <PRE><CODE>base search | stats sum(eval(if(match(topic, "^([A|a])", count, null()) )) as A sum(eval(if(match(topic, "^([B|b])", count, null()) )) as B </CODE></PRE> Wed, 12 Oct 2016 16:55:46 GMT https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244200#M72705 sundareshr 2016-10-12T16:55:46Z https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244201#M72706 <P>Can we have to some real sample output? What type of values does the field topic contains?</P> Wed, 12 Oct 2016 17:17:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-merge-values-of-the-same-field-extraction/m-p/244201#M72706 somesoni2 2016-10-12T17:17:11Z