Ignore results that do not appear in a separate search

[Amohlmann]

A quick run down of what I want first:
I have a bunch of data flowing in for production, test, and training environments. I would like to filter out the test and training environments. Each environment has a unique ID which I would like to cross reference from a database using DBX. Then run stats on the remaining results

The two searches I want to combine:

 host=MASTER *error* Message=$ErrorSelection$|stats count by siteID|sort -num(count)

And

| dbquery "SQLDB" "SELECT * FROM SubscriptionTable WHERE IsProduction=1"

I would like to join both searches by their "siteID" then only display the sitesIDs that have IsProduction=1

[stephane_cyrill]

remove the pipe between search and dbquery
In the answer of NOUMSSI.

[NOUMSSI]

Hi try this:

host=MASTER *error* Message=$ErrorSelection$|stats count by siteID|sort -num(count) | join [search | dbquery "SQLDB" "SELECT * FROM SubscriptionTable WHERE IsProduction=1"]

[NOUMSSI]

ok try this:

host=MASTER *error* Message=$ErrorSelection$|stats count by siteID|sort -num(count) | join [search  dbquery "SQLDB" "SELECT * FROM SubscriptionTable WHERE IsProduction=1"]

I've just remove pipe

[Amohlmann]

I get the following error:
Error in 'dbquery' command: This command must be the first command of a search.