Which search string returns a filed containing the number of matching events and names that field Event Count?
index=security failure | stats sum as “Event Count”
index=security failure | stats count as “Event Count”
index=security failure | stats count by “Event Count”
index=security failure | stats dc(count) as “Event Count”
Submit