hello yannk!my first query (source ivr_history), I need the output to show host, sidnum & sessID. I am able to achieve this using this query: index=ivr sourcetype=ivr_history [search sourcetype=ivr_history "some data"| fields sidnum host sessID2]| table sidnum host sessID2| dedup sidnum host sessID2 The 2nd query has a different source:ivr_sef. manually, i would run the query above and copy the sessID2 value and paste it into this query: index=ivr sourcetype=ivr_sef "pasted sessID value here"| table id What I want to achieve is combine these 2 queries and remove the manual copy paste. Thanks ... View more