A subsearch is a search technique used to perform a new search using the results of a search or to combine the results of multiple searches.

A subsearch is specified by enclosing it in square brackets "[]". For example, in firewall logs, it is used in cases such as investigating the breakdown of communication destination IP and communication volume for the communication source IP with the largest communication data volume.