Hi All, I can't put an eval before my search syntax so I am trying to use an eval-Macro called "FriendlyEval" However, I can't seem to find a way to call it! The macro | eval Friendly=$Friend$ | lookup Friendly_Name.csv Friendly OUTPUT FullHost | lookup Friendly_Name.csv Friendly OUTPUT FullHostHSB The Search eventtype=eop_WinEventLog:Application FriendlyEval - where I need to call the macro host IN (FullHost, FullHostHSB) Message="OMIS $omis01$" OR TaskCategory="omis $omis01$" Type IN ($Type01$) | table _time host TaskCategory Type EventCode Message | sort - _time ... View more