title: Search in splunk doesn't sum()
body: <p>I have this search in Splunk, and the field <code>value</code> it shows in the graphic, is just the biggest and not the sum of each one.</p>
  
  <pre><code>host=users| JOIN type=inner id [ SEARCH host=bills | rename id_user AS id ] | stats sum(value) as value by document | sort - value | head 20
  </code></pre>
  
  <p>value has this format <code>2000.0</code></p>
  
  <p>Maybe it has to be with the <code>sort - value</code>
  I'm new using Splunk</p>
  
  <p>This is the result without the <code>stats</code></p>
  
  <p><a href="https://i.stack.imgur.com/wJpCp.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/wJpCp.png" alt="enter image description here"></a></p>