Are all these OK?
* | STATS COUNT * | stats count * | STATS count * | stats COUNT
Conclusion: search lang keywords (what I meant) break down as so:
avg, sum, count, earliest, ...
Simplest rule seems to be "uppercase
NOT, lowercase everything else to be safe". Which is mildly irksome, as I feel uppercasing keywords (a.k.a. operators) helps distinguish them from operands -- a primitive form of syntax highlighting, if you will. (You will see lots of SQL weenies do this.)
In 6.0.1, the time modifiers (e.g. earliest, latest) must be lowercase. This may be a bug, the search job inspection shows mixed interpretation, but the base lispy output treats the date values as search terms.
Search: Latest="01/25/2014:00:00:00" DEBUG: base lispy: [ AND 00 01 2014 25 ... keywords latest::01/25/2014:00:00:00