Event Data: {"Debug":[   {"Action":"User-Created","Result":"OK"},   {"Action":"Granted-Permissions","Result":"Failed"} ]} My try: # Get the events where Action equal "User-Created" and Result="Failed" Search: index=index_name Debug{}.Action="User-Created" AND Debug{}.Result="Failed" Expected: No records should be returned because there are not a single record where the two values are true. Result: Multiple records returned, conjunction is not being performed, it operates like an OR logical function. Notes: It works if I choose simple not KV data. Thanks, ... View more