It returns a result, but it has some problems:
One problem is that it doesn't pull real_ip_address from the second search. The name of the field is correct, so I'm not sure why it's not there.
Another problem is that it returns 22 rows in the table. It should only return 1 row.
Oddly (to me anyhow) if I use _time+1 instead of +2, there are no results. I'm sure there's a good reason for this, but confused by it.
... View more