The number of use cases for subsearches in the real world might be small, but for those situations where they can be applied, subsearches can be a magic bullet. Let's look at an example and then talk about some rules.
Using subsearches to find loosely related events
Subsearch
Let's start with these events:
2015-02-10 12:59:59 msgid=704783 from=tuck@companyx.com to=taylor@VENDOR1.com 2015-02-10 12:59:59 msgid=171755 from=steve@companyx.com to=lou@VENDOR1.com 2015-02-10 12:59:59 msgid=668955 from=lou@companyx.com to=steve@Vendor2.com 2015-02-10 12:59:59 msgid=001404 from=mary@companyx.com to=richard@Vendor2.com 2015-02-10 12:59:59 msgid=284794 from=ronnie@companyx.com to=toto@Vendor2.com 2015-02-10 12:59:59 msgid...