https://community.splunk.com/t5/Splunk-Search/Join-Same-Saved-Search/m-p/132404#M36126 <P>Have a look at the <CODE>selfjoin</CODE> command. See <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/SearchReference/Selfjoin">http://docs.splunk.com/Documentation/Splunk/6.0.1/SearchReference/Selfjoin</A></P> Fri, 31 Jan 2014 13:03:19 GMT richgalloway 2014-01-31T13:03:19Z https://community.splunk.com/t5/Splunk-Search/Join-Same-Saved-Search/m-p/132403#M36125 <P>Hi,</P> <P>I created generic saved search and it is running fine individually as below</P> <PRE><CODE>|savedsearch PausedTime_SS index_name=one_index </CODE></PRE> <P>However, when I called them twice and joined them with common field </P> <PRE><CODE>|savedsearch PausedTime_SS index_name=one_index |join Day [|savedsearch PausedTime_SS index_name=other_index] </CODE></PRE> <P>I am getting following:</P> <P><STRONG>Error in 'SearchParser': Found circular dependency when expanding savedsearch=PausedTime_SS</STRONG></P> <P>Is it possible to join same saved searches?</P> <P>Thanks,</P> <P>Sanjay</P> Thu, 30 Jan 2014 21:37:02 GMT https://community.splunk.com/t5/Splunk-Search/Join-Same-Saved-Search/m-p/132403#M36125 sanjay_shrestha 2014-01-30T21:37:02Z https://community.splunk.com/t5/Splunk-Search/Join-Same-Saved-Search/m-p/132404#M36126 <P>Have a look at the <CODE>selfjoin</CODE> command. See <A href="http://docs.splunk.com/Documentation/Splunk/6.0.1/SearchReference/Selfjoin">http://docs.splunk.com/Documentation/Splunk/6.0.1/SearchReference/Selfjoin</A></P> Fri, 31 Jan 2014 13:03:19 GMT https://community.splunk.com/t5/Splunk-Search/Join-Same-Saved-Search/m-p/132404#M36126 richgalloway 2014-01-31T13:03:19Z