Working with some Apache logs. I am trying to get a table that displays the uri, the clientip, and the number of times that clientip has hit that uri (as hits). Everything is working as expected except for that table. Why doesn't the uri part work? I get a table with uri that has blank values, and the other fields show the expected values.
index=* clientip=* uri=*
| stats count(uri) AS hits by clientip
| table uri, hits, clientip