So, if I have an index=abc with fields a,b Also, I have index=xyz with fields b,c Now I want to count the results where a="foo", c="bar" and b from both indices are common. I want to do this without join because of the maxout limitation. A sample query with join is:   index="abc" a="foo" | join type=inner b [search(index="xyz" c="bar")] | timechart span="1h" count as foobar   Can someone help with a query giving the same result without join? ... View more