Using ldapsearch results in a search.

[Moreilly97]

I was just wondering if there was a way to use the results of a ldapsearch in a standard search. For example if I extract a list of Employees in a certain Location using a ldapsearch, can I formulate a search to use this information?

[DalJeanis]

Yes, of course. You can, for instance, look at the format command. if you return the information that you want to search for out of a subsearch, the format command can change it to a form that it will be useful to search.

look at these for a description of how that works

https://answers.splunk.com/answers/557445/not-another-subsearch-question-take-values-from-on.html
https://answers.splunk.com/answers/562711/how-to-search-based-on-the-time-range-returned-fro-1.html