Not sure if this will answer your question but hopefully it will point some of us in the right direction. Many thanks to superstar Splunker Cindy McCririe! My situation was similar but not identical which is why I'm not sure I will answer the original question. renaming would fail with the same empty column, as would fieldformat "Expected Value" = "$" + tostring("Expected Value","Commas") but THIS works. . . | eval "Expected Value" = round(Number * (Probability/100)) | fieldformat "Expected Value" = "$" + tostring('Expected Value',"Commas") (Note the single quotes instead of double quotes in the fieldformat command) | table Number, Probability, "Expected Value" Hope that helps! ... View more

I think you want: mysearch | transaction startswith=start endswith=end mvlist=t | table field1, field2, field3 By default transaction will "group" like values, mvlist tells it to display repeated values in your resulting table The next issue i haven't figured out yet will be if you need to export the results. . . ... View more