I am having difficulty combining two individual searches.  I have the following ldap search that lists the member names from group1 or group2 | ldapsearch search="(&(objectClass=group)(|(cn=group1)(cn=group2)))" attrs="member" | ldapfetch dn=member attrs="givenName, sn" | eval user=givenName." ".sn | table user I want the ldap search to list the member names when it meets the criteria of the base search: index=myindex EventCode=5136 action=success name="A directory service object was modified" How do I combine the two? ... View more