Hello, splunk community. I tried to exec subsearch command for adding search condition of "main" search. Datas of target of subsearch have single field named nameOfFruit. example below, apple orange pineapple ... and so on I wrote search command like this, index=main [search index=sub | return nameOfFruit] but it didn't work yet. How should i write? or can't i do this? note: Of course, before i ask this question, I found related articles below. but any answer of these question didn't work well. [How to return raw data results from subsearch query?] http://answers.splunk.com/answers/172644/how-to-return-raw-data-results-from-subsearch-quer.html [Appending search results with subsearch fields.] http://answers.splunk.com/answers/170474/appending-search-results-with-subsearch-fields.html [Filter search results based on return value of subsearch] http://answers.splunk.com/answers/89845/filter-search-results-based-on-return-value-of-subsearch.html [return command - exit (or return known value) if no results found] http://answers.splunk.com/answers/89951/return-command-exit-or-return-known-value-if-no-results-found.html ... View more