https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273584#M82499 <P>How about using search for both the panels to populate 3rd panel? As far as I know, for simple xml, results for one panel can't be accessed in other panel. Could you post your current query ?</P> Thu, 15 Oct 2015 22:05:00 GMT somesoni2 2015-10-15T22:05:00Z https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273583#M82498 <P>Hello,</P> <P>I have two different panels in a dashboard and the common field is a time field. I need to compare these two time fields, and if they match, I want to show the same matching values in a different panel.</P> <P>Your inputs will help me a lot!</P> <P>Thanks in advance!</P> Thu, 15 Oct 2015 14:42:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273583#M82498 bharathkumarnec 2015-10-15T14:42:36Z https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273584#M82499 <P>How about using search for both the panels to populate 3rd panel? As far as I know, for simple xml, results for one panel can't be accessed in other panel. Could you post your current query ?</P> Thu, 15 Oct 2015 22:05:00 GMT https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273584#M82499 somesoni2 2015-10-15T22:05:00Z https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273585#M82500 <P>Thanks for your reply:</P> <P>First Panel Query : index=xyz host=abc condition1 | table rtime,def<BR /> Second Panel Query : index=xyz host=abc condition2 | table stime,ghi</P> <P>I need to comparre rtime and stime from two panels and project common values in third panel.</P> Fri, 16 Oct 2015 04:21:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273585#M82500 bharathkumarnec 2015-10-16T04:21:01Z https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273586#M82501 <P>As @somesoni2 said, you can't actually compare across panels in a dashboard. But you could create a third panel, with this search</P> <PRE><CODE>index=xyz host=abc (condition1) OR (condition2) | eval commonTime = coalesce(rtime,stime) | stats values(def) as DEF values(ghi) AS GHI by commonTime | where isnotull(DEF) AND isnotnull(GHI) </CODE></PRE> <P>Note that the above search requires an exact match of the time fields. Often, times may vary by as much as a few seconds and still be considered a match. If this is true in your case, you might want to use the the <CODE>bin</CODE> command to "round" the time. To "round" to the second, insert the following as the third command in the sequence:</P> <PRE><CODE>| bin span=1s commonTime </CODE></PRE> Fri, 16 Oct 2015 06:04:40 GMT https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273586#M82501 lguinn2 2015-10-16T06:04:40Z https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273587#M82502 <P>Thanks a lot lguinn, it is very helpful!</P> Sat, 17 Oct 2015 20:03:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-compare-two-columns-in-two-different-table-panels-and/m-p/273587#M82502 bharathkumarnec 2015-10-17T20:03:23Z