@aqstevens... I had taken the field names from your previous query, can you please ensure that field name and case is same as that in your data being searched?
You can add the following before stats to make sure you are getting all the fields as required for stats.
| table _time Account_Name Source_Network_Address dest_nt_host New_Process_Name Process_Command_Line
Run the query with table command and without stats to ensure all fields being displayed as expected,
Then run the stats (match all the field names in stats command and run without search criteria to ensure stats is correlating events as expected.
Finally you can add in the search condition as per your need. Let us know how it goes.
... View more