It is not working, I should get the result as 2
| stats dc(operation) as count
Is that what you mean?
yes, this query gave me count as 1, I want the count of activate to be displayed. Better I will create the field extraction for activate and use the below query
| stats dc(activate) as count
| where operation="activate"
| stats count by operation
User wanted only the numerical value to be displayed, so I used above query
| search operation="activate"
| stats count by operation
| table count