May be I should Reprhase the question so I have one index which has all Employeedata like email, status, id, region etc. (index=employeedata) I have a lookup table which has the data in this formate (table) id EmployeeEmail laptopnam blah blah A1234 a@gmail.com 0 0 0 A1233 b@gmail.com 0 0 0 A1235 c@gmail.com 0 0 0   I want to get the information of all employees listed in this table from index=employeedata, for that, I am using index=employeedata sourcetype=ldap | lookup table employeeemail as email | table email, status, id, region but the results are inconclusive,  can someone please see what is wrong with this.  ... View more

I used the same. no results ... View more