topic Re: How to write a search to exclude an existing field(s) if Field1 has a value in ColumnA? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291283#M87995 <P>I find the calculation logic to be very confusing. Could you provide more details on the same, possibly with some example values?</P> Tue, 27 Mar 2018 08:16:56 GMT somesoni2 2018-03-27T08:16:56Z How to write a search to exclude an existing field(s) if Field1 has a value in ColumnA? https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291282#M87994 <P>Table below showing Column A, Column B, Column C and Column D. </P> <P>Calculation has to be:<BR /> If Field1 has ColumnA value, then ignore (Don't Count) Field2 &amp; Field3. <BR /> If Field2 has ColumnA value then ignore (Don't Count) Field3 value. <BR /> Also total calculated rows should not be more than 3 as there are only 3 Applications.</P> <PRE><CODE>Column A Column B Column C xyz Field1 Application1 xyz Field2 Application1 xyz Field2 Application2 abc Field3 Application2 efg Field3 Application3 </CODE></PRE> <P>I want number of times Field 1, Field2 and Field3 is appearing. So the expected result should be </P> <PRE><CODE>Column A Column B Field1 1 Field2 1 Field3 1 </CODE></PRE> Tue, 27 Mar 2018 04:11:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291282#M87994 parikhapurva04 2018-03-27T04:11:26Z Re: How to write a search to exclude an existing field(s) if Field1 has a value in ColumnA? https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291283#M87995 <P>I find the calculation logic to be very confusing. Could you provide more details on the same, possibly with some example values?</P> Tue, 27 Mar 2018 08:16:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291283#M87995 somesoni2 2018-03-27T08:16:56Z Re: How to write a search to exclude an existing field(s) if Field1 has a value in ColumnA? https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291284#M87996 <P>I am trying to get value of different column on the same row.</P> Tue, 27 Mar 2018 14:08:47 GMT https://community.splunk.com/t5/Splunk-Search/How-to-write-a-search-to-exclude-an-existing-field-s-if-Field1/m-p/291284#M87996 parikhapurva04 2018-03-27T14:08:47Z