https://community.splunk.com/t5/Dashboards-Visualizations/Nesting-Searches-in-Advanced-XML/m-p/40537#M1937 <P>Is it possible to use advanced xml to nest searches inside of oneanother? For example:</P> <P>&lt;module name="HiddenSearch"&gt; <BR /><BR /> &lt;param name="search"&gt; the first part of the search <BR /><BR /> &lt;module name="Search"&gt; <BR /><BR /> &lt;param name="search"&gt;the second part of the search <BR /><BR /> &lt;/module&gt; <BR /><BR /> &lt;/module&gt; <BR /> <BR /> <BR /></P> <P>I would like to be able to search "the first part of the search|the second part of the search"</P> Tue, 20 Nov 2012 17:38:57 GMT tiberious726 2012-11-20T17:38:57Z https://community.splunk.com/t5/Dashboards-Visualizations/Nesting-Searches-in-Advanced-XML/m-p/40537#M1937 <P>Is it possible to use advanced xml to nest searches inside of oneanother? For example:</P> <P>&lt;module name="HiddenSearch"&gt; <BR /><BR /> &lt;param name="search"&gt; the first part of the search <BR /><BR /> &lt;module name="Search"&gt; <BR /><BR /> &lt;param name="search"&gt;the second part of the search <BR /><BR /> &lt;/module&gt; <BR /><BR /> &lt;/module&gt; <BR /> <BR /> <BR /></P> <P>I would like to be able to search "the first part of the search|the second part of the search"</P> Tue, 20 Nov 2012 17:38:57 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Nesting-Searches-in-Advanced-XML/m-p/40537#M1937 tiberious726 2012-11-20T17:38:57Z https://community.splunk.com/t5/Dashboards-Visualizations/Nesting-Searches-in-Advanced-XML/m-p/40538#M1938 <P>The answer is the "PostProcess" module</P> Tue, 20 Nov 2012 22:16:03 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Nesting-Searches-in-Advanced-XML/m-p/40538#M1938 tiberious726 2012-11-20T22:16:03Z