I want to search like: index=whatever "term_1" AND (at least one event in the source of the found record contains term_2) Suppose source1 is: /var/log/source1.log event 1 event 2 term_2 event 3 event 4 term_1 source2 is: /var/log/source2.log event 1 event 2 event 3 term_1 When searching for term_1, I want to see the results only from source1. Because source1 also has an event having term_2 in it. ... View more