This question was asked a year ago and I was wondering if Splunk had any updates on this. The way the XML works right now, using `$job.sid$` in a post-process search gets the id of the base search rather than the post-processed search. Still looking for solutions to this.
