Hello 🙂 I want to find in subsearch autonomous_system for the IP address which I provided (in this example for 1.1.1.1) . Next, based on the name of the autonomous_system returned from subsearch, I want to find all IP addresses connecting to my network that belongs to that autonomous_system.  For now I have something like that: index=firewall src_ip=* | lookup asn ip as src_ip [search index=firewall  src_ip=1.1.1.1 | fields src_ip | lookup asn ip as src_ip | rename autonomous_system AS subsearch_autonomous_system | dedup subsearch_autonomous_system] | stats values(src_ip) by subsearch_autonomous_system But when I run this search I got error: Error in 'lookup' command: Cannot find the source field '(' in the lookup table 'asn'. Can anyone help me with that? Regards Daniel ... View more