Hi Guys, I have a question regarding grouping in tables. I have sets of data from 2 sources monitoring a transaction in 2 systems. At its start, it gets a TransactionID. The interface system takes the TransactionID and adds a SubID for the subsystems. Each step gets a Transaction time. One Transaction can have multiple SubIDs which in turn can have several Actions. 1 -> A -> Ac1 1 -> B -> Ac2 1 -> B -> Ac3 It's no problem to do the coalesce based on the ID and do calculations. It gets tricky when I try to Group them. serach ....| coalesce ...| stats list (Service) list(Time1) list(Action) by TransactionID SubID It works fine if I only Group for TransactionID since it exists in both sources. But it doesn't work anymore for a grouping also by SubID. Then Service and Time1 disappear. I suppose it's because there is no SubID in their source. So how do you join from 2 sources with subsequent grouping based on 2 or more fields from different sources? ... View more