I did that and it resulted in 0 results. However, i know there is at least 2 events that meet the criteria, both have the same FieldB value and one has FieldA (a) and the other has FieldA (b). I am trying to see if there are any more occurrences. ... View more

i need events that have FieldA(a, b) and FieldB is the same value for the events.... event 1 2 3 4 5 6 7 8 9 field a a a b a b a a a a field b 1 2 1 2 3 3 4 5 6   index= source FieldA("a","b") will return all events i want to filter it so that only events that have matching values in FieldB and the values in field a differ so i would expect events 1, 3, 5, and 6 to return from the table above but i do not know the values for FieldB at the time of search. ... View more

did i do this wrong?:   ... View more

but i don't know the values in FieldB prior to searching ... View more

i need events that have FieldA(a, b) and FieldB is the same value for the events.... event 1 2 3 4 5 6 7 8 9 field a a a b a b a a a a field b 1 2 1 2 3 3 4 5 6   index= source FieldA("a","b") will return all events i want to filter it so that only events that have matching values in FieldB and the values in field a differ so i would expect events 1, 3, 5, and 6 to return from the table above ... View more