Hi @mrcassout, are you're speaking about tags or eventtypes? you can create eventtypes containing other eventtypes or tags, e.g.: eventtype1 is index=my_index eventtype2 is eventtype=eventtype1 sourcetype=sourcetypeA and it has associated tagA eventtype3 is eventtype=eventtype1 sourcetype=sourcetypeB eventtype4 is eventtype=eventtype1 TAG=tagA Instead tags are a feature that you associate to an eventtype; to one eventtype you can associate none, one or more eventtypes or tags. So you can create a tag inside another one working on eventtypes and associating tags to eventtypes Ciao. Giuseppe ... View more