Using append

Once you have done a subsearch, you may want to add the results of that subsearch to another set of results. If that is the case, and you are using historical data, use the syntax provided here to append the subsearch:

SPL>  . . | append [subsearch]

You can also specify various timing options if you like.