I am trying to link 2 events together due to information in the first event not showing in the second. the information is needed to filter the results. I have been trying to use transaction but in doing that I am loosing information needed to filter the end results-   eventA OR (eventB (amount>25 AND amount!=250 AND amount!="NONE")) |transaction blue |lookup C fieldD OUTPUT eggs |search eggs>21 |table fieldD amount eggs blue   that is the basics of the search, the problem is that fieldD is only in eventA, amount only in eventB. After using transaction to link them, amount disappears and can't be used to filter. Is there any other way to link the 2 events without loosing data within the events?  ... View more