I have tried the above query. The sub search is not working. I have tried using appendcols   Its working, I am attaching the screenshot for your reference.   vivekarora_0-1627710538784.png     ... View more

Yes, It should return the same result in both smart and verbose mode. I am also using Splunk 8.2.1 Attaching the screenshot for your reference. I am using index=snow, its returing 99 events. vivekarora_0-1627708660914.png   When I am using stats command, index=snow|stats count in verbose mode, its showing same 99 events vivekarora_1-1627708751298.png If I am using same stats command in smart mode, its showing same result index=snow | stats count   vivekarora_2-1627708840996.png   Hence, the output of stats command in smart and verbose mode in splunk 8.2.1 is same.     ... View more