index="king" source ="/King/East" I am confused why my search doesn't finish. I have a '2 month window' applied to the time. When I inspect the job I see: This search is still running and is approximately 100% complete. In the log, the following two items keep repeating every ~5s: 01-29-2018 21:14:25.205 INFO SortOperator - maxmem = 209715200 01-29-2018 21:14:25.337 INFO DispatchThread - Generating results preview took 157 ms When I remove the time filter, and allow for 'All time', the search completes with the output: This search has completed and has returned 16,484 results by scanning 44,750 events in 1.944 seconds The search that gets stuck: ... View more