I have a log statement that looks list this:
Currently I manually first search "ipAddress=" AND "userId=" AND "productId="
to pull out the 3 values. Then I search for the union of these fields:
search "ipAddress=126.96.36.199" OR "userId=42" OR "productId=24".
How can I automated this two searches? I tried following the subsearch example but it's not working.