How to add column values ?

[richgalloway]

Try the addcoltotals command.

<<your current query>>
| addcoltotals labelfield=location label="AM05"

[Muthu_Vinith]

Is there any other ways like using eval, append commands? @richgalloway 

[richgalloway]

There's almost always more than one way to do something in SPL, but why take the hard road?

<<your current search>>
| appendpipe 
    [stats sum(cap) as cap, sum(login) as login 
    | eval location="AM05"]

[Muthu_Vinith]

@richgalloway I've tried this command it works. However if I need to filter out specific locations like AB AC and AD, sum their values to a new location let's say AM05. When I search for AM05 , it should display the summed value. If i search for AB, it should show the existing value. Is it possible? 

[richgalloway]

I don't understand these new requirements.  If AB is filtered out then it cannot be searched.  You cannot search for AM05 since it doesn't exist until the appendpipe command runs.

What is the final result expected to look like?

[Muthu_Vinith]

For example, I have location field containing AB, AC, AD. I need to sum these three locations and create a new location named AM05,  without replacing the existing AB, AC and AD. When searching for AM05, I want to see the added values, and when searching for AB, it should display the existing value !! @richgalloway 

[richgalloway]

Restating the requirements does not explain them.

---

@Muthu_Vinith wrote:

For example, I have location field containing AB, AC, AD. I need to sum these three locations and create a new location named AM05,  without replacing the existing AB, AC and AD.

You have that.  See the following example query

| makeresults format=csv data="location,cap,login 
AA01,10,5
AB02,6,0
AC03,10,0"
| appendpipe 
    [stats sum(cap) as cap, sum(login) as login 
    |  eval location="AM05"]
| table location cap login

---

@Muthu_Vinith wrote:

When searching for AM05, I want to see the added values, and when searching for AB, it should display the existing value !!

---

The AM05 location doesn't exist until this search runs.  Therefore, you can't search for AM05.

[Muthu_Vinith]

@richgalloway  Sorry I got confused. I'll say my exact requirements . In my location field there some locations
AB
AC
AD
AF
and so on. I want new one which is AM in location field where AM indicates the addition of (AB AC AD AF). 
I want to display both AB AC AD AF and AM in the location field.

Don't consider this 
AA01,10,5 

I tried something like this
|eval row=AM05
|table row location
where it will show AM05 for all fields. But i want only for addition of (AB AC AD AF) which is AM05 . without replacing existing ones that is (AB AC AD AF).

[ITWhisperer]

| append [| makeresults | eval location="AM"]