<search id="base_query_filter">
<query>
Index=a,sourcetype=x,eval y=A+B</query>
</search>
<search id="base_query">
<query>
index=a,sourcetype=x,eval y=A+B -(here can i consider the base_query_filter base search)
join type =inner max=0(index=b,sourtype=y)</query>
<search>
Is it possible to consider one base search in another base search id?
Thank You in advance
Renuka
You can try something like this.
<search id="base_query_filter">
<query>
Index=a,sourcetype=x,eval y=A+B
</query>
</search>
<search base="base_query_filter" id="base_query">
<query>
join type =inner max=0(index=b,sourtype=y)</query>
</search>
You can try something like this.
<search id="base_query_filter">
<query>
Index=a,sourcetype=x,eval y=A+B
</query>
</search>
<search base="base_query_filter" id="base_query">
<query>
join type =inner max=0(index=b,sourtype=y)</query>
</search>