I would suggest this to add following to your props.conf on Search Head, may need to reload/refresh/restart
AUTO_KV_JSON = false
This should completely stop doing JSON field extraction as search time as you already have fields extracted during index-time (INDEX_EXTRACTIONS = json). Once you apply this and reloaded the configuration, try your query again.
... View more
