I have tried the above query. The sub search is not working. I have tried using appendcols   Its working, I am attaching the screenshot for your reference.       ... View more

Yes, It should return the same result in both smart and verbose mode. I am also using Splunk 8.2.1 Attaching the screenshot for your reference. I am using index=snow, its returing 99 events.   When I am using stats command, index=snow|stats count in verbose mode, its showing same 99 events If I am using same stats command in smart mode, its showing same result index=snow | stats count     Hence, the output of stats command in smart and verbose mode in splunk 8.2.1 is same.     ... View more