Hello Community!  I am trying to get the record count by index that I am getting per month in Splunk. I am using this search with tstats, because there are millions of records per month and from I read this is more efficient than the stats command.     | tstats count WHERE (index=*) BY index _time span=1mon | timechart span=1mon count   But I don't know why I am receiving this error:    Error in 'TsidxStats': WHERE clause is not an exact query   Can anyone help me to know what I am doing wrong?  Thanks      ... View more