@Lucas_K wrote: lol its been more than 5 years! 😉 Network connectivity between the new hosts on new (at the time) ports wasn't fully enabled as such the communication between members and the cluster master did not work. If you see this error now (in the year 2020) this can be caused by other different issues such as the bundle being too large. Just here to give you +1 Karma for answering a question FIVE YEARS LATER. and then elaborating on it for the applicability of the current year (2020). your +1 karma is 2yrs late.. I got here as fast as I could ... View more

index=main sourcetype="access_combined_wcookie" file=success.do status=200 | stats sum(Price) as Revenue by ProductName I don't think the quotes and the switching file= and status= around should matter. The above query should return the same results as the one I posted in my original question. ... View more

initially I kept the MUST_BREAK_AFTER as blank. Still it did not show the full data. ... View more

you're welcome ... View more