Splunk Query Two Stats Count