I am not sure how befitting it is in your scenario but if Idea is just to avoid writing OR(s) between 50 patterns to search then can you try this: 1) Make a csv file of all your pattern and upload it as a lookup say patterns.csv which has fieldname (say) PatternField PatternField Login status is Account details flow for Apple Phone for user Id Payment status and Account details flow for Android Phone for user Id finger print status of User id Transfer account status After that use the below query to complete your search by replacing your sourcetype names for "A", "B", "C" and so on: sourcetype=A OR sourcetype=B OR sourcetype=C ([|inputlookup patterns.csv | fields PatternField | return 50 $PatternField ] ) Hope this helps. ... View more