A function that counts the number of search result events.
When used following the initial simple search query, returns the number of events resulting from the search. When used iteratively, counts the number of results returned from the complex search preceding the pipe.
* in log.access | count
Returns the number of events in log access.
* in log.application | count | group by event | order by count desc
Returns the number of each event in the log application in a descending order
* in log.access | count | group by remote host | interval 15 minutes | count | interval 15 minutes | display count as number of users
Returns the distinct numbder of users in 15 minutes intervals in the log access