searching for events in a source based on value of another source

[kenbaugher]

I have two sources that I'd like to combine/join or search on one based on the other.

Source 1 - has two fields  name & date

Source 2  - has several fields including name & date, field1, fields2, field3, etc.

I'd like to get the most recent date for a specific name from source 1, and show only the events in source 2 with that name & date

[ITWhisperer]

You can use the first search as a subsearch to filter the second search - something like this

<search source2> [search <search source1> | stats latest(date) as date by name]

[kenbaugher]

Thank you, I had to play around with my search a bit, but this overall syntax was the trick