https://community.splunk.com/t5/Splunk-Search/Combining-two-field-into-one-output/m-p/329821#M98194 <P>Try this!</P> <P>(your search)|eval company_join=company_id+company_name|table company_join<BR /> published1microsoft</P> <P>(your search)|eval company_join=company_id+":"+company_name|table company_join<BR /> published1:microsoft</P> Tue, 29 Sep 2020 17:06:04 GMT HiroshiSatoh 2020-09-29T17:06:04Z https://community.splunk.com/t5/Splunk-Search/Combining-two-field-into-one-output/m-p/329820#M98193 <P>Hi,</P> <P>Below is the query which generates the table output.</P> <P>index=abc sourcetype=report | table company_id , company_name</P> <P>OUTPUT</P> <P>company_id company_name</P> <P>published1 microsoft<BR /> published3 google<BR /> Published4 apple</P> <P>Can someone please help me on how can I get the company_id , company_name is one field. something like below:</P> <P>Result<BR /> published1,microsoft<BR /> published23,google<BR /> published4,apple</P> Tue, 29 Sep 2020 17:09:35 GMT https://community.splunk.com/t5/Splunk-Search/Combining-two-field-into-one-output/m-p/329820#M98193 kteng2024 2020-09-29T17:09:35Z https://community.splunk.com/t5/Splunk-Search/Combining-two-field-into-one-output/m-p/329821#M98194 <P>Try this!</P> <P>(your search)|eval company_join=company_id+company_name|table company_join<BR /> published1microsoft</P> <P>(your search)|eval company_join=company_id+":"+company_name|table company_join<BR /> published1:microsoft</P> Tue, 29 Sep 2020 17:06:04 GMT https://community.splunk.com/t5/Splunk-Search/Combining-two-field-into-one-output/m-p/329821#M98194 HiroshiSatoh 2020-09-29T17:06:04Z