Splunk Search

Combining two field into one output

kteng2024
Path Finder

Hi,

Below is the query which generates the table output.

index=abc sourcetype=report | table company_id , company_name

OUTPUT

company_id company_name

published1 microsoft
published3 google
Published4 apple

Can someone please help me on how can I get the company_id , company_name is one field. something like below:

Result
published1,microsoft
published23,google
published4,apple

0 Karma

HiroshiSatoh
Champion

Try this!

(your search)|eval company_join=company_id+company_name|table company_join
published1microsoft

(your search)|eval company_join=company_id+":"+company_name|table company_join
published1:microsoft

Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...