Get the line result count.
host=server01 Error | stats sum(linecount) as Total
Get result count per day or hour
host=server01 Error | bucket _time span=hour |stats count by _time
