Hi I have a search that will display result that will fall under device1 and device2. If device1 i need to check lookup1 (and if device2 then lookup2) for a match deviceName=device , outputting Code and doing a regex on Code to extract some values. The regex will be different for lookup1 and lookup2. Here is my code that isnt working (no results displayed):       <base-search replaced some details with '...' for security> <if device1> | lookup lookup1 device as device output CODE | mvexpand ... | mvexpand ... | where ...!= device and like(..., "...%") | rename ... as ... | eval LRD1=substr(..., 1, 4), LRD2=substr(...,1,4) <if device2> | lookup lookup2 device as device output CODE | search Node=o* | rex field=Description "(?<bearer>...)" | table *         After each lookup there are a few operations to perform dependant on which lookup table is searched. Both searches are working ok on their own just not combined. Thanks ... View more