derivequery: pass search filter to query

[nikicat]

This patch corrects derived queries.

[rashidkpc]

I'd like to see this be configurable perhaps with 3 modes: terms alone, AND, or OR

[nikicat]

Hmm, terms alone, AND is ok, but what's the case for OR?

[rashidkpc]

A case for OR would be something like this. Say I have this set of logs, with fields foo and bar, each of which get a unique ID used for tracking a session.
foo=1
foo=1 bar=2
bar=2

Now say I want to track the progress of the session that started as foo=1. All I know is foo=1 and it will eventually get a bar value, and eventually lose its foo value. OR would allow me to derive a list of values for bar based on foo, so I would end up with:

foo:1 OR bar:2

Which would match all of the above events

[nikicat]

I've updated the patch