I am trying to combine sourcetypes in a search but when I try I am not getting any numbers f some of the fields. below is my code. If I take out the NetworkConfigFriendlyName then the rest of the fields show but once I add in the NetworkConfigFriendlyName then only the host and this field shows. Can anyone explain why? Thanks
index=uberagent sourcetype=uberAgent:OnOffTransition:StandbyDetail2 OR sourcetype=uberAgent:System:SystemPerformanceSummary2 OR sourcetype="uberAgent:System:NetworkConfigInformation"
| stats count(TargetStateDisplayName) as "Total Events" avg(CPUUsagePercent) as "%CPU Usage" avg(IOPercentDiskTime) as "%IO Time" avg(RAMUsagePercent) as "%RAM Usage" by host,NetworkConfigFriendlyName
| rename host as "Machine Name"
| table "Machine Name" "Total Events" "%CPU Usage" "%RAM Usage" "%IO Time", NetworkConfigFriendlyName