Get results from 'total events yesterday' search.

@mulby @jzoldak @brianhw @rocha 

This is predicated on a saved search in Splunk.

CC @feanil  @e0d 
Small nit: you could pull the delay out into a constant, here and above.