Sub-search or Sub-query in Splunk
search command can be used for sub-search or sub query in Splunk. search command should be within []. Syntax:main query [search subquery] Sample Query:index=abc type=test[search index=abc *Exception* source=Gearliest=-5d | table requestId] ....