How to use data models in subsearch

[eidil]

I am trying to use data models in my subsearch but it seems it returns 0 results.

| datamodel disk_forecast C_drive search
| join type=inner host_name
[

| datamodel disk_forecast C_drive search
| search value > 80
| stats count by host_name
| lookup host_tier.csv host_name output host_name, tier
| search tier = G
| fields host_name
]
|timechart span=1d first(value) by host_name limit=0

I tried using normal searches to replace the data model and it worked fine. Is there any restriction of using datamodel in subsearch?

[eidil]

because i'm trying to get results based on host_name in host_tier.csv with gold tier SLA

[richgalloway]

I still don't see the need for a join. The subsearch is matching events from the exact same main search, keeping only the events from the subsearch (type=inner), so you should only need the subsearch.

[eidil]

This query is just a part of some more complex query. the subsearch will return specific host name while the  main search will search the disk space volume at a specified time.

[richgalloway]

Why are you joining a datamodel to itself? The result of the inner join should be the same as the subsearch.