@akhera,
Try this,
your search|streamstats current=f window=1 last(Column1) as prev|eval rowno=1|accum rowno
|eval Total=if(rowno%2==0,Column1+prev,null())|fields - rowno,prev
You shall change the logic to display data in alternative columns if needed
Hi @akhera,
Did the answer below solve your problem? If so, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help ya. Thanks for posting!
@mstjohn_splunk @renjith.nair This is really helpful and it solved my issue. thanks for your help and support.
@akhera,
Try this,
your search|streamstats current=f window=1 last(Column1) as prev|eval rowno=1|accum rowno
|eval Total=if(rowno%2==0,Column1+prev,null())|fields - rowno,prev
You shall change the logic to display data in alternative columns if needed