index=main sourcetype="access_combined_wcookie" file=success.do status=200 | stats sum(Price) as Revenue by ProductName
I don't think the quotes and the switching file= and status= around should matter. The above query should return the same results as the one I posted in my original question.
... View more