count command counts the number of events that a given query
expression yields. For example:
This prints the number of events in the database that have an
address field in the subnet
--estimate flag skips the candidate checks, i.e., asks only the
index and does not verify the hits against the database. This is a faster
operation and useful when an upper bound suffices.