Hello, I am trying to only return the values of certain fields to be used in a subsearch. The problem I'm encountering, is that I have multiple values from different fields which I want to extract. I have 4 fields - src, src_port, dst, dst_port If I table out the results and use format, my search reads as such: "src"="<IP>" AND "src_port"="<port>" AND "dst"="<IP>" AND "dst_port"="<port>" What I want is only the values: "<ip>" AND "<port>" AND "<ip>" AND "<port>" I've tried using: return 10 $src $src_port $dst $dst_port which gives me the desired output, but encases the entire output in one set of quotations and not individually as per the same output that would be created using the table command I've also tried using: eval query = src. " " .src_port. " " .dst. " " .dst_port which gets me closer, but then outputs each four values encased within the quotations. Can anyone help me out with the desired output? Regards, Dan
... View more