This is my search I am trying to use in an event type so I can tag my events.
index = mail | eval Subject=coalesce(Subject,subjectx) | search Subject = "*NVEM Battery Alert*"
But i get this error? "Message: Eventtype search string cannot be a search pipeline or contain a subsearch"
How would I achieve my search without the subsearch