*I would typically use the map command for this, but it's currently broken and support is working to fix it That being said, I'm trying to take a value from search1, pass it to search2 , grab a field from that 2nd search, and also pass that to 3rd search. Hopefully one of you lovely people can point me in the right direction. IE: index=foo | rex field field1 index=boo field2=$field1$ | table src_ip index=bar src_ip=$src_ip$ | stats values(domain) etc etc Any help on this would be supremely appreciated
... View more