I was just wondering if there was a way to use the results of a ldapsearch in a standard search. For example if I extract a list of Employees in a certain Location using a ldapsearch, can I formulate a search to use this information?
Yes, of course. You can, for instance, look at the format
command. if you return the information that you want to search for out of a subsearch, the format
command can change it to a form that it will be useful to search.
look at these for a description of how that works
https://answers.splunk.com/answers/557445/not-another-subsearch-question-take-values-from-on.html
https://answers.splunk.com/answers/562711/how-to-search-based-on-the-time-range-returned-fro-1.html