I have found the issue , this is due to query which i have used .. In my query have renamed the field to existing field .
I have removed the rename command from the query as those fields are already extracted by Splunk .
Now the search command is working fine as expected without any issues .
Thank you for all your help guys .
... View more