https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500244#M139303 <P>Try like this</P> <PRE><CODE> index=* [search index=* "idnumber" | tail 1 | table Number |eval Number=mvrange(Number-10,Number+10) ] </CODE></PRE> Mon, 03 Feb 2020 22:35:21 GMT somesoni2 2020-02-03T22:35:21Z https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500243#M139302 <P>I am trying to pass number from subsearch to main search and find before or after 10 values of number. So if number is 50 parent search should pull events from 59 to 59 or 50 to 41.</P> <PRE><CODE>index=* Number="*" [search index=* "idnumber" | tail 1 | fields Number | format] | head/tail 10 </CODE></PRE> Mon, 03 Feb 2020 20:20:52 GMT https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500243#M139302 satya2p 2020-02-03T20:20:52Z https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500244#M139303 <P>Try like this</P> <PRE><CODE> index=* [search index=* "idnumber" | tail 1 | table Number |eval Number=mvrange(Number-10,Number+10) ] </CODE></PRE> Mon, 03 Feb 2020 22:35:21 GMT https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500244#M139303 somesoni2 2020-02-03T22:35:21Z https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500245#M139304 <P>Thank you, it worked.</P> Tue, 04 Feb 2020 16:27:27 GMT https://community.splunk.com/t5/Splunk-Search/Pass-subsearch-field-to-parent-search/m-p/500245#M139304 satya2p 2020-02-04T16:27:27Z