Splunk Search

How to add two rows to one?

New Member

I have 2 rows with same field name, how do I add the count of 2 rows and display the result in one row.
please find the example:

Fruit | A | count

apple |3 | 3
apple |2 | 2
mango|1 | 1
mango|2 |2

To look something like this:

Fruit | count
apple | 5
mango | 3

Thank you.

0 Karma

Champion

Try this!

(your search)
|stats sum(count) as count by Fruit