Synopsis

A function that counts the number of search result events.

Syntax

count

Required Arguments

None

Optional Arguments

None

Description

When used following the initial simple search query, returns the number of events resulting from the search. When used iteratively, counts the number of results returned from the complex search preceding the pipe.

Examples

Example 1: 

  * in log.access | count

 Returns the number of events in log access.

Example 2:

* in log.application | count | group by event | order by count desc

Returns the number of each event in the log application in a descending order

Example 3:

* in log.access | count | group by remote host | interval 15 minutes | count | interval 15 minutes | display count as number of users

Returns the distinct numbder of users in 15 minutes intervals in the log access