I am having difficulty combining two individual searches. I have the following ldap search that lists the member names from group1 or group2
| ldapsearch search="(&(objectClass=group)(|(cn=group1)(cn=group2)))" attrs="member"
| ldapfetch dn=member attrs="givenName, sn"
| eval user=givenName." ".sn
| table user
I want the ldap search to list the member names when it meets the criteria of the base search:
index=myindex EventCode=5136 action=success name="A directory service object was modified"
How do I combine the two?
