So this is what didn't make sense to me. You said what I thought, search term order before first pipe shouldn't matter. This is the query that ended up working (I had time constraints set to all time for all tries)
index=main sourcetype="access_combined_wcookie" file=success.do status=200 | stats sum(Price) as Revenue by ProductName
I don't think the quotes and the switching file= and status= around should matter. The above query should return the same results as the one I posted in my original question.
... View more