How to combine multiple rows (from sub search results) into different columns on single row (main search)

[Raymond2T]

I have a query that returns the following result.

Column 1	Column 2
A1	A2
B1	B2
C1	C2
D1	D2

And I would like to transform it to something like this

1st  row	1st row	2nd row	2nd row	3 rd row	3rd row	4th row	4th row
A1	A2	B1	B2	C1	C2	D1	D2

| makeresults
| eval _raw="Column1,Column2
A1,A2
B1,B2
C1,C2
D1,D2"
| multikv forceheader=1
| table Column1,Column2

|.......

[Raymond2T]

Column 1	Column 2
A1	A2
B1	B2
C1	C2
D1	D2

And I would like to transform it to something like this

1st  row	1st row	2nd row	2nd row	3 rd row	3rd row	4th row	4th row
A1	A2	B1	B2	C1	C2	D1	D2

[ITWhisperer · Accepted solution]

You can't have duplicate column names. To get the results in one row, try

| makeresults
| eval _raw="Column1,Column2
A1,A2
B1,B2
C1,C2
D1,D2"
| multikv forceheader=1
| table Column1,Column2
| streamstats count as row
| foreach * 
    [ eval columnvalues=if("<<FIELD>>"="row",columnvalues,if(isnull(columnvalues),<<FIELD>>,mvappend(columnvalues,<<FIELD>>)))]
| fields columnvalues
| mvexpand columnvalues
| transpose 0
| where column="columnvalues"

[Raymond2T]

Thank you so much. It is good solution