Hopefully I can explain this in a way where it can be understood and fingers crossed answered.  I have a search that returns the user and date. On occasion the user is blank, in which case I want to perform a search on a different index to get the appropriate value and populate the first search results. I am trying the following: | eval user=if(user=””), searchmatch(new search | table UserName), $user$) This is easy enough when the value is hard coded, but want to grab the result from the new search value. Obviously, this does not work but hopefully gives an idea what is desired. Any ideas how to accomplish? ... View more