Hi,
I have an unusual scenario for the data I am working with and would like to see if it's even possible to extract data this way. In brief, I parsed a value from my initial search query to a variable using rex and now I want to use only that value as new query instead of sub-query.
Workflow:
Trying to make a simple example:
First query -> Gives test suite level record. Parse to get UUID value
Second query -> Independent query using that UUID and then use that for making graph. Please note that 2nd query results not linked with 1st query and sub-search will only give one record.
(Apologies if it's a very common workflow but I was not able to search it easily)
Hi @zakirhere,
You can append the new UUID value to a lookup, your second search use that lookup for the graph.
Lookup on that result only shows results from the parent level (meaning same result). I checked in other groups and looks like I have to use some external programming language to pass these variable values and start a new query.