Why don't you try with macros and if, case statement?  ... View more

| makeresults | eval myInput="*" | append [ | search "my search related to query 1" | rex field=_raw "Job id : (?<job_id>[^,]+)" | eval query_type=if(myInput="*", "query1", null()) | where query_type="query1" | table job_id, query_type, myInput ] | append [ | search "my search related to query 2" | rex field=_raw "Job id : (?<job_id>[^,]+)" | eval query_type=if(myInput!="*", "query2", null()) | where query_type="query2" | table job_id, query_type, myInput ] ... View more