How to combine the values of same field into one

[renuka]

Hello

My question is how to combine the same values into one which are getting differentiate  by another field

Example

if I done stats by ReqId it is giving me 1 as count

 stats count(Result=Pass) as Pass  by ReqId, Feature set ,domain, test type, asil 

it gives output

ReqID	Feature set	Domain	test type	asil	verdict	Date	Total	Pass conducted	Passed	Fail
5.7.1.2.2.8		SW V&V	System Test SW Module/Unit Test	B	PARTIAL PASS	Tue 10 Nov 2020 10:30:00	5	3	3	0

if I add verified column to same search

  stats count(Result=Pass) as Pass  by ReqId, Feature set, domain, test type, asil ,verified

the output is

ReqId	Feature set	Domain	Test type	Asil	Verified	verdict	date	Total	Conducted	Passed
5.7.1.2.2.8		SW V&V	System Test SW Module/Unit Test	B		PARTIAL PASS		2	0	0
R: 5.7.1.2.2.8		SW V&V	System Test SW Module/Unit Test	B	RC01	PASS	Tue 10 Nov 2020 10:30:00	3	3	3

Now even when i add verified also it should be display with single ReqId

Please help me out with is issue

Thank you in advance 

Renuka

[scelikok · Accepted solution]

Hi @renuka,

So you should use values function on stats. Please try below;

| stats count(Result=Pass) as Pass values(verified) as verified by ReqId, Feature set, domain, test type, asil

If this reply helps you an upvote is appreciated.

[scelikok]

Hi @renuka,

It seems for given ReqId you have two events having different Verified field content. And this Verified field is not null that is why shows up on results. You can filter this before stats like below;

| search verified!=""
| stats count(Result=Pass) as Pass  by ReqId, Feature set, domain, test type, asil ,verified

If this reply helps you an upvote is appreciated.

[renuka]

Hello @scelikok 

 Thank you for helping me and it works

[renuka]

Thanks for replying

But I want  to take two columns count as single column.

Like In above example I got total count as 5

when I  count by verified it giving me output 2 and 3 total count for same ReqID

 Even If I count by verified I want total count as 5 for one ReqID

I tried with |search verified!="" it just eliminating the columns which are not equal, but I want to combine two value counts of same ReqID